Vulnerabilidades explotables hoy
4,375en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico4,729
- Alto18,793
- Medio17,148
- Bajo1,728
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2006-5229—99.1%
——30——CVE-2024-9380—99.1%
KEV—80Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability—CVE-2013-3184—99.1%
——30——CVE-2023-4415—99.1%
——30——CVE-2021-32819—99.1%
——30——CVE-2023-39456—99.1%
——30——CVE-2015-7243—99.1%
——30——CVE-2006-1186—99.1%
——30——CVE-2015-1172—99.1%
——30——CVE-2007-1355—99.1%
——30——CVE-2011-4722—99.1%
——30——CVE-2015-1793—99.1%
——30——CVE-2019-61115.9 MED99.1%
——30An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).12dCVE-2025-43566—99.1%
——30——CVE-2006-6425—99.1%
——30——CVE-2008-0926—99.1%
——30——CVE-2022-36097—99.1%
——30——CVE-2024-0986—99.1%
——30——CVE-2002-0391—99.1%
——30——CVE-2022-31626—99.1%
——30——CVE-2006-0848—99.1%
——30——CVE-2009-2485—99.1%
——30——CVE-2008-0437—99.1%
——30——CVE-2017-8618—99.1%
——30——CVE-2016-3251—99.1%
——30——CVE-2010-1318—99.1%
——30——CVE-2012-0500—99.1%
——30——CVE-2021-28966—99.1%
——30——CVE-2022-32174—99.1%
——30——CVE-2012-4177—99.1%
——30——CVE-2013-5704—99.1%
——30——CVE-2021-34427—99.1%
——30——CVE-2000-0408—99.1%
——30——CVE-2007-4712—99.1%
——30——CVE-2023-42325—99.1%
——30——CVE-2005-0554—99.1%
——30——CVE-2008-0081—99.1%
——30——CVE-2016-7194—99.1%
——30——CVE-2006-09875.0 SIN99.1%
——30The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.16dCVE-2021-43267—99.1%
——30——