Vulnerabilidades explotables hoy
414,784en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,781
Nuevos KEV · 24H0
Exploit Today ≥ 701,709
Distribución · última ventana
- Crítico5,286
- Alto20,850
- Medio19,532
- Bajo2,048
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2016-7030—92.0%
——28——CVE-2016-7890—92.0%
——28——CVE-2012-0229—92.0%
——28——CVE-2026-651610.0 CRÍ92.0%
——28Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.22dCVE-2005-0753—92.0%
——28——CVE-2007-2282—92.0%
——28——CVE-2007-3094—92.0%
——28——CVE-2004-2704—92.0%
——28——CVE-2016-1821—92.0%
——28——CVE-2026-186869.8 CRÍ92.0%
——28A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.add_user of the file /cgi-bin/glc of the component nas-web RPC Wrapper. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.22dCVE-2005-4467—92.0%
——28——CVE-2002-2170—92.0%
——28——CVE-2014-8269—92.0%
——28——CVE-2008-6806—92.0%
——28——CVE-2013-5220—92.0%
——28——CVE-2017-2833—92.0%
——28——CVE-2015-3325—92.0%
——28——CVE-2012-3962—92.0%
——28——CVE-2014-9205—92.0%
——28——CVE-2006-1654—92.0%
——28——CVE-2002-1050—92.0%
——28——CVE-2005-2627—92.0%
——28——CVE-2010-0440—92.0%
——28——CVE-2017-1000004—92.0%
——28——CVE-2005-0408—92.0%
——28——CVE-2009-0583—92.0%
——28——CVE-2004-1993—92.0%
——28——CVE-2016-8670—92.0%
——28——CVE-2000-0148—92.0%
——28——CVE-2002-0270—92.0%
——28——CVE-2013-5832—92.0%
——28——CVE-2013-5823—92.0%
——28——CVE-2021-391548.5 ALT92.0%
——28XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.39dCVE-2018-1000075—92.0%
——28——CVE-2020-12823—92.0%
——28——CVE-2015-4059—92.0%
——28——CVE-2020-09097.5 ALT92.0%
——28A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.
To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.
The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle these network packets.88dCVE-2012-4561—92.0%
——28——CVE-2019-169439.8 CRÍ92.0%
——28A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.38dCVE-2010-1947—92.0%
——28——