Vulnerabilidades explotables hoy
368,208en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,694
Nuevos KEV · 24H0
Exploit Today ≥ 701,631
Distribución · última ventana
- Crítico2,147
- Alto7,679
- Medio5,506
- Bajo542
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-39440—3.9%
——1——CVE-2026-655935.4 MED3.9%
——1n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a server-side request forgery vulnerability in the dynamic-node-parameters endpoints that lack authorization scopes. Authenticated attackers can supply absolute URLs in routing configuration to override baseURL restrictions and make the n8n server issue HTTP requests to arbitrary internal targets when SSRF protection is disabled.38dCVE-2025-46442—3.9%
——1——CVE-2023-53248—3.9%
——1——CVE-2023-53444—3.9%
——1——CVE-2026-531695.5 MED3.9%
——1In the Linux kernel, the following vulnerability has been resolved:
accel/ethosu: reject NPU_OP_RESIZE commands from userspace
NPU_OP_RESIZE is a U85-only command that the driver does not yet
implement. The existing WARN_ON(1) placeholder fires unconditionally
whenever userspace submits this command via DRM_IOCTL_ETHOSU_GEM_CREATE,
causing unbounded kernel log spam.
If panic_on_warn is set the kernel panics, giving any unprivileged user
with access to the DRM device a trivial denial-of-service primitive.
Replace the WARN_ON(1) with an explicit -EINVAL return so the ioctl
rejects the command before it reaches hardware.59dCVE-2023-53284—3.9%
——1——CVE-2023-53385—3.9%
——1——CVE-2025-46457—3.9%
——1——CVE-2025-39418—3.9%
——1——CVE-2025-38507—3.9%
——1——CVE-2026-5408—3.9%
——1——CVE-2022-20141—3.9%
——1——CVE-2025-49850—3.9%
——1——CVE-2026-622365.4 MED3.9%
——1grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASecret frontend task, which regenerates and persists a new TOTP secret for the authenticated session user without any anti-CSRF nonce or Origin/Referer check. Because Grav core dispatches the task from the GET 'task:' URI parameter and the default session cookie is SameSite=Lax, an attacker can lure a logged-in victim to an off-site page that performs a top-level GET navigation, rotating the victim's TOTP secret so their enrolled authenticator no longer matches the server, effectively forcing 2FA re-enrollment. Sites configured with session.samesite: Strict are not affected.48dCVE-2025-6603—3.9%
——1——CVE-2023-20044—3.9%
——1——CVE-2026-35339—3.9%
——1——CVE-2025-43313—3.9%
——1——CVE-2020-0146—3.9%
——1——CVE-2024-6749—3.9%
——1——CVE-2020-0143—3.9%
——1——CVE-2025-66861—3.9%
——1——CVE-2025-401177.8 ALT3.9%
——1In the Linux kernel, the following vulnerability has been resolved:
misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl()
Commit eefb83790a0d ("misc: pci_endpoint_test: Add doorbell test case")
added NO_BAR (-1) to the pci_barno enum which, in practical terms,
changes the enum from an unsigned int to a signed int. If the user
passes a negative number in pci_endpoint_test_ioctl() then it results in
an array underflow in pci_endpoint_test_bar().36dCVE-2025-61679—3.9%
——1——CVE-2026-208857.2 ALT3.9%
——1Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.3dCVE-2024-3479—3.9%
——1——CVE-2025-386677.8 ALT3.9%
——1In the Linux kernel, the following vulnerability has been resolved:
iio: fix potential out-of-bound write
The buffer is set to 20 characters. If a caller write more characters,
count is truncated to the max available space in "simple_write_to_buffer".
To protect from OoB access, check that the input size fit into buffer and
add a zero terminator after copy to the end of the copied data.36dCVE-2026-23599—3.9%
——1——CVE-2025-39725—3.9%
——1——CVE-2026-481903.5 BAJ3.9%
——1An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be anabled and CustomerGroupSupport has to be used to be affected.
This issue affects OTRS:
* 7.0.X
* 8.0.X
* 2023.X
* 2024.X
* 2025.X
* 2026.X before 2026.4.X44dCVE-2020-0151—3.9%
——1——CVE-2020-0158—3.9%
——1——CVE-2025-39903—3.9%
——1——CVE-2026-35375—3.9%
——1——CVE-2025-6497—3.9%
——1——CVE-2026-663165.4 MED3.9%
——1Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.28dCVE-2025-9892—3.9%
——1——CVE-2025-6496—3.9%
——1——CVE-2024-24901—3.9%
——1——