Vulnerabilidades explotables hoy
367,284en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,274
- Alto9,334
- Medio5,332
- Bajo522
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-26099—1.3%
——0——CVE-2022-20096—1.3%
——0——CVE-2026-193216.7 MED1.3%
——0Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers that should be inaccessible to the service processor. Successful exploitation could result in limited confidentiality or availability impacts to the affected host system.6dCVE-2026-472285.2 MED1.3%
——0Admidio is an open-source user management solution. `modules/registration.php` mode `send_login` regenerates a random password for `user_uuid_assigned`, stores its bcrypt hash in `adm_users.usr_password`, and emails the cleartext to that user. Every other state-changing mode in the same file (`assign_member`, `assign_user`, `delete_user`, `create_user`) calls `SecurityUtils::validateCsrfToken($_POST['adm_csrf_token'])` first; the `send_login` branch does not. Prior to version 5.0.10, page visited by a registration-administrator can issue the request as a top-level navigation, the browser sends the admin's `SameSite=Lax` cookies, and the server resets the chosen user's password without any further interaction from the admin. Version 5.0.10 fixes the issue.19dCVE-2023-42144—1.3%
——0——CVE-2021-0643—1.3%
——0——CVE-2023-33111—1.3%
——0——CVE-2025-7433—1.3%
——0——CVE-2021-0681—1.3%
——0——CVE-2023-43528—1.3%
——0——CVE-2022-21751—1.3%
——0——CVE-2021-0641—1.3%
——0——CVE-2026-169735.5 MED1.3%
——0IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read.7dCVE-2024-34731—1.3%
——0——CVE-2022-20094—1.3%
——0——CVE-2026-28494—1.3%
——0——CVE-2025-63292—1.3%
——0——CVE-2026-204856.0 MED1.3%
——0In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931.12dCVE-2025-48582—1.3%
——0——CVE-2025-46406—1.3%
——0——CVE-2026-797795.3 MED1.3%
——0rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after same-host HTTPS-to-HTTP redirects. An on-path attacker observing the plaintext hop can capture and reuse credentials to perform WebDAV operations with the compromised account's permissions.4dCVE-2021-0428—1.3%
——0——CVE-2024-45574—1.3%
——0——CVE-2026-56132—1.3%
——0——CVE-2026-35356—1.3%
——0——CVE-2025-54615—1.3%
——0——CVE-2026-35233—1.3%
——0——CVE-2026-704958.8 ALT1.3%
——0A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve `system:masters` access, granting them full control over the cluster.5dCVE-2026-580845.5 MED1.3%
——0To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains the current time for the timer's clock. For a timer using CLOCK_TAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to userspace.
An unprivileged local user can obtain uninitialized kernel stack memory by creating a POSIX timer with CLOCK_TAI and calling timer_settime(2), potentially disclosing sensitive kernel data.5hCVE-2025-21077—1.3%
——0——CVE-2022-21750—1.3%
——0——CVE-2020-0268—1.3%
——0——CVE-2022-21754—1.3%
——0——CVE-2025-14017—1.3%
——0——CVE-2021-22460—1.3%
——0——CVE-2022-20325—1.3%
——0——CVE-2024-56455—1.3%
——0——CVE-2026-477685.5 MED1.3%
——0nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs). This issue has been patched in version 0.3.2.32dCVE-2024-45567—1.3%
——0——CVE-2026-204557.8 ALT1.3%
——0In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6784.41d