Vulnerabilidades explotables hoy
367,284en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,687
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,311
- Alto9,414
- Medio5,381
- Bajo529
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-71119—2.6%
——1——CVE-2025-58677—2.6%
——1——CVE-2026-20794—2.6%
——1——CVE-2026-533758.8 ALT2.6%
——1In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/vce: Prevent partial address patches
In the case that only one of lo/hi is valid, the patching could result
in a bad address written to in FW.34dCVE-2026-24063—2.6%
——1——CVE-2026-48523—2.6%
——1——CVE-2017-14880—2.6%
——1——CVE-2026-53423—2.6%
——1——CVE-2024-42185—2.6%
——1——CVE-2026-45846—2.6%
——1——CVE-2026-654486.5 MED2.6%
——1Unauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner – AcyChecker <= 1.8.1 versions.35dCVE-2023-21471—2.6%
——1——CVE-2024-11023—2.6%
——1——CVE-2025-45083—2.6%
——1——CVE-2025-58809—2.6%
——1——CVE-2025-48109—2.6%
——1——CVE-2025-46707—2.6%
——1——CVE-2025-48307—2.6%
——1——CVE-2025-52539—2.6%
——1——CVE-2025-58849—2.6%
——1——CVE-2025-5028—2.6%
——1——CVE-2026-226827.1 ALT2.6%
——1OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in built-in file tools due to inconsistent parameter handling in permission enforcement, allowing attackers who can influence agent tool execution to read arbitrary local files outside the intended repository scope. Attackers can exploit the path parameter not being passed to the PermissionChecker in read_file, write_file, edit_file, and notebook_edit tools to bypass deny rules and access sensitive files such as configuration files, credentials, and SSH material, or create and overwrite files in restricted host paths in full_auto mode.49dCVE-2025-48320—2.6%
——1——CVE-2024-35648—2.6%
——1——CVE-2024-13026—2.6%
——1——CVE-2026-42410—2.6%
——1——CVE-2025-64897—2.6%
——1——CVE-2025-58847—2.6%
——1——CVE-2025-58853—2.6%
——1——CVE-2025-49044—2.6%
——1——CVE-2025-49425—2.6%
——1——CVE-2025-49453—2.6%
——1——CVE-2025-48359—2.6%
——1——CVE-2026-664456.5 MED2.6%
——1Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions.36dCVE-2019-25617—2.6%
——1——CVE-2026-23108—2.6%
——1——CVE-2025-58844—2.6%
——1——CVE-2026-664346.5 MED2.6%
——1Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions.36dCVE-2026-470416.0 MED2.6%
——1Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).36dCVE-2026-75758—2.6%
——1Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.to_string/1, or List.to_charlist/1 to exhaust a BEAM node's memory.
Inspect.List's charlist branch in lib/elixir/lib/inspect.ex classifies a list as a charlist using List.ascii_printable?/2, which examines only the first :printable_limit (4096 by default) elements, and then calls IO.chardata_to_string/1 on the whole term. A list whose printable prefix exceeds that limit but which contains a later element that is not a code point (an atom, an out-of-range integer, or an improper tail) is therefore mis-classified, and the conversion raises ArgumentError. That conversion runs inside List.to_string/1, whose rescue clause builds its message by interpolating inspect(list), which re-enters the same branch and raises again. The nested inspection is an argument to raise, so the recursion is not in tail position and every level is retained: the process stack grows monotonically while each cycle re-walks the list, until the process is killed by max_heap_size or, by default, the node runs out of memory. List.to_charlist/1 has the same rescue shape.
Below the printable limit the inner inspect/1 sees the invalid element within its counter and renders the list in ordinary bracket form, so a single ArgumentError is raised and no recursion occurs.
This issue affects elixir: from 1.15.0-rc.0 before 1.18.5, from 1.19.0-rc.0 before 1.19.6, and from 1.20.0-rc.0 before 1.20.4.4d