Vulnerabilidades explotables hoy
367,284en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,274
- Alto9,334
- Medio5,332
- Bajo522
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-625773.3 BAJ1.4%
——0Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).5dCVE-2021-0420—1.4%
——0——CVE-2026-23014—1.4%
——0——CVE-2025-58126—1.4%
——0——CVE-2023-43526—1.4%
——0——CVE-2026-406337.8 ALT1.4%
——0Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.47dCVE-2026-0648—1.4%
——0——CVE-2025-27460—1.4%
——0——CVE-2024-20143—1.4%
——0——CVE-2026-328495.5 MED1.4%
——0NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable iov_len is declared as a signed int but assigned from an unsigned cop->dst_len value, causing undefined behavior when cop->dst_len exceeds INT_MAX. A local attacker with access to /dev/crypto and a compression session type can exploit this vulnerability by providing a dst_len value exceeding INT_MAX to trigger a kernel panic through NULL pointer dereference when CONFIG_SVS is disabled and corrupted UIO pointer arithmetic.48dCVE-2022-2390—1.4%
——0——CVE-2024-49843—1.4%
——0——CVE-2026-599115.5 MED1.4%
——0Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information into Log File vulnerability in the svc_tools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.13dCVE-2021-0424—1.4%
——0——CVE-2023-33069—1.4%
——0——CVE-2024-20145—1.4%
——0——CVE-2025-58123—1.4%
——0——CVE-2025-52347—1.4%
——0——CVE-2023-41970—1.4%
——0——CVE-2026-419862.4 BAJ1.4%
——0Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.40dCVE-2024-39670—1.4%
——0——CVE-2025-11193—1.4%
——0——CVE-2021-0416—1.4%
——0——CVE-2024-5803—1.4%
——0——CVE-2023-20016—1.4%
——0——CVE-2026-4393—1.4%
——0——CVE-2025-8307—1.4%
——0——CVE-2024-23370—1.4%
——0——CVE-2023-20635—1.4%
——0——CVE-2026-170076.7 MED1.4%
——0IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.6dCVE-2021-0422—1.4%
——0——CVE-2023-22384—1.4%
——0——CVE-2025-20985—1.4%
——0——CVE-2023-43635—1.4%
——0——CVE-2026-684477.1 ALT1.4%
——0In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size
CRIU checkpoint copies the MQD control stack using cp_hqd_cntl_stack_size
from hardware without bounding it to the allocated BO region. If the HW
field is larger than the queue's control stack allocation, memcpy reads
past the BO into adjacent GTT memory and can leak kernel data to userspace.
Store the page-aligned control stack BO size in mqd_manager and clamp
checkpoint copies and reported checkpoint sizes to
min(cp_hqd_cntl_stack_size, mm->ctl_stack_size). Apply the same bound
for multi-XCC v9.4.3 checkpoint layout.
(cherry picked from commit 6c2abd0ec09e86c6323010673766f76050e28aa3)14dCVE-2024-45445—1.4%
——0——CVE-2025-22441—1.4%
——0——CVE-2026-91277.5 ALT1.4%
——0A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploited, an attacker could alter the configuration to point to a malicious executable, resulting in arbitrary code execution when any user interacts with the external tools functionality.6dCVE-2023-43521—1.4%
——0——CVE-2025-14907—1.4%
——0——