Vulnerabilidades explotables hoy
414,784en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,781
Nuevos KEV · 24H0
Exploit Today ≥ 701,709
Distribución · última ventana
- Crítico5,286
- Alto20,850
- Medio19,532
- Bajo2,048
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2021-24401—91.9%
——28——CVE-2007-5057—91.9%
——28——CVE-2001-0440—91.9%
——28——CVE-2024-39887—91.9%
——28——CVE-2019-7266—91.9%
——28——CVE-2017-12088—91.9%
——28——CVE-2016-4049—91.9%
——28——CVE-2017-2520—91.9%
——28——CVE-2019-9496—91.8%
——28——CVE-2003-1171—91.8%
——28——CVE-2021-270617.8 ALT91.8%
——28HEVC Video Extensions Remote Code Execution Vulnerability88dCVE-2008-1040—91.8%
——28——CVE-2018-121167.5 ALT91.8%
——28Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.37dCVE-2019-20358—91.8%
——28——CVE-2025-95856.3 MED91.8%
——28A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.50dCVE-2023-50916—91.8%
——28——CVE-2024-30851—91.8%
——28——CVE-2016-9488—91.8%
——28——CVE-2015-5208—91.8%
——28——CVE-2021-39279—91.8%
——28——CVE-2007-3512—91.8%
——28——CVE-2011-0924—91.8%
——28——CVE-2008-3108—91.8%
——28——CVE-2005-0358—91.8%
——28——CVE-2026-2084—91.8%
——28——CVE-2017-90497.5 ALT91.8%
——28libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.32dCVE-2022-33206—91.8%
——28——CVE-2021-26754—91.8%
——28——CVE-2017-10788—91.8%
——28——CVE-2000-0500—91.8%
——28——CVE-2006-3702—91.8%
——28——CVE-2003-1503—91.8%
——28——CVE-2015-8608—91.8%
——28——CVE-2016-6131—91.8%
——28——CVE-2021-35049—91.8%
——28——CVE-2025-520539.8 CRÍ91.8%
——28TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_417D74 function via the file_name parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.9dCVE-2011-2535—91.8%
——28——CVE-2020-94939.8 CRÍ91.8%
——28A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.39dCVE-2019-1324—91.8%
——28——CVE-2010-4015—91.8%
——28——