Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,431
- Alto17,996
- Medio16,582
- Bajo1,664
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2019-5418—99.9%
KEV—80Rails Ruby on Rails Path Traversal Vulnerability—CVE-2026-344867.5 ALT99.9%
KEV—80Apache Tomcat Missing Encryption of Sensitive Data Vulnerability34dCVE-2003-0352—99.9%
——30——CVE-2021-21311—99.9%
KEV—80Adminer Server-Side Request Forgery Vulnerability—CVE-2019-5736—99.9%
——30——CVE-2009-1122—99.9%
——30——CVE-2023-48788—99.9%
KEVR80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2013-47867.5 ALT99.9%
——30The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.16dCVE-2019-1003000—99.9%
——30——CVE-2018-12613—99.9%
——30——CVE-2022-21587—99.9%
KEVR80Oracle E-Business Suite Unspecified Vulnerability—CVE-2017-15944—99.9%
KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—CVE-2012-1457—99.9%
——30——CVE-2018-1000861—99.9%
KEV—80Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability—CVE-2016-1555—99.9%
KEV—80NETGEAR Multiple WAP Devices Command Injection Vulnerability—CVE-2015-8562—99.9%
——30——CVE-2023-20887—99.9%
KEV—80Vmware Aria Operations for Networks Command Injection Vulnerability—CVE-2026-341978.8 ALT99.9%
KEV—80Apache ActiveMQ Improper Input Validation Vulnerability82dCVE-2022-22947—99.9%
KEV—80VMware Spring Cloud Gateway Code Injection Vulnerability—CVE-2022-26138—99.9%
KEV—80Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability—CVE-2020-15920—99.9%
——30——CVE-2018-11409—99.9%
——30——CVE-2012-3153—99.9%
——30——CVE-2012-05079.8 CRÍ99.9%
KEVR80Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability73dCVE-2021-337667.3 ALT99.9%
KEV—80Microsoft Exchange Server Information Disclosure76dCVE-2020-35847—99.9%
——30——CVE-2024-12987—99.9%
KEV—80DrayTek Vigor Routers OS Command Injection Vulnerability—CVE-2023-27524—99.9%
KEV—80Apache Superset Insecure Default Initialization of Resource Vulnerability—CVE-2025-01089.1 CRÍ99.9%
KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability31dCVE-2020-6207—99.9%
KEV—80SAP Solution Manager Missing Authentication for Critical Function Vulnerability—CVE-2019-5544—99.9%
KEVR80VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability—CVE-2021-39144—99.9%
KEV—80XStream Remote Code Execution Vulnerability—CVE-2009-1535—99.9%
——30——CVE-2026-314317.8 ALT99.9%
KEV—80Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability47dCVE-2024-3272—99.9%
KEV—80D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability—CVE-2021-35395—99.9%
KEV—80Realtek AP-Router SDK Buffer Overflow Vulnerability—CVE-2023-25717—99.9%
KEV—80Multiple Ruckus Wireless Products CSRF and RCE Vulnerability—CVE-2014-0112—99.9%
——30——CVE-2007-0882—99.9%
——30——CVE-2019-1821—99.9%
——30——