Vulnerabilidades explotables hoy
414,784en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,781
Nuevos KEV · 24H0
Exploit Today ≥ 701,709
Distribución · última ventana
- Crítico5,286
- Alto20,850
- Medio19,532
- Bajo2,048
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2006-2171—92.0%
——28——CVE-2010-1186—92.0%
——28——CVE-2010-2600—92.0%
——28——CVE-2013-2427—92.0%
——28——CVE-2012-5269—92.0%
——28——CVE-2016-6496—92.0%
——28——CVE-2026-1112167.2 ALT92.0%
——28Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute commands as root by injecting shell metacharacters into an IPv6 link-local zone index. Attackers can set a gateway Monitor IP whose unvalidated zone carries a payload, which start_dpinger() passes unescaped to the dpinger shell command when monitoring is applied.20dCVE-2013-2425—92.0%
——28——CVE-2012-5271—92.0%
——28——CVE-2025-122338.8 ALT92.0%
——28A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.38dCVE-2006-0671—92.0%
——28——CVE-2006-7095—92.0%
——28——CVE-2021-1294—92.0%
——28——CVE-2020-1167—92.0%
——28——CVE-2024-7616—92.0%
——28——CVE-2018-1571—92.0%
——28——CVE-2021-24404—92.0%
——28——CVE-2006-7080—92.0%
——28——CVE-2007-1792—92.0%
——28——CVE-2018-9128—92.0%
——28——CVE-2017-12090—92.0%
——28——CVE-2026-1690—92.0%
——28——CVE-2006-0260—92.0%
——28——CVE-2007-6245—92.0%
——28——CVE-2019-0722—92.0%
——28——CVE-2007-1282—92.0%
——28——CVE-2019-5619—92.0%
——28——CVE-2016-6082—92.0%
——28——CVE-2021-46227—92.0%
——28——CVE-2022-38121—92.0%
——28——CVE-2024-7833—92.0%
——28——CVE-2021-43741—92.0%
——28——CVE-2015-7767—92.0%
——28——CVE-2012-5267—92.0%
——28——CVE-2008-2713—92.0%
——28——CVE-2006-1102—92.0%
——28——CVE-2007-2980—92.0%
——28——CVE-2019-19141—92.0%
——28——CVE-2026-507527.4 ALT92.0%
——28A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.115dCVE-2006-7096—92.0%
——28——