Vulnerabilidades explotables hoy
403,479en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,756
Nuevos KEV · 24H0
Exploit Today ≥ 701,689
Distribución · última ventana
- Crítico5,556
- Alto21,547
- Medio19,983
- Bajo2,101
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2003-1141—99.3%
——30——CVE-2017-17736—99.3%
——30——CVE-2004-0297—99.3%
——30——CVE-2007-2545—99.3%
——30——CVE-2026-429458.1 ALT99.3%
——30NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.20hCVE-2007-2707—99.3%
——30——CVE-2006-1652—99.3%
——30——CVE-2023-50290—99.3%
——30——CVE-2013-4124—99.3%
——30——CVE-2015-1486—99.3%
——30——CVE-2012-1195—99.3%
——30——CVE-2018-8467—99.3%
——30——CVE-2012-0182—99.3%
——30——CVE-2008-1105—99.3%
——30——CVE-2001-1320—99.3%
——30——CVE-2004-0567—99.3%
——30——CVE-2007-0785—99.3%
——30——CVE-2022-22719—99.3%
——30——CVE-2009-2990—99.3%
——30——CVE-2019-9053—99.3%
——30——CVE-2007-4313—99.3%
——30——CVE-2001-0537—99.3%
——30——CVE-2000-0630—99.3%
——30——CVE-2018-0860—99.3%
——30——CVE-2000-0284—99.3%
——30——CVE-2017-9829—99.3%
——30——CVE-2000-08867.5 SIN99.3%
——30IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.34dCVE-2007-3039—99.3%
——30——CVE-1999-0612—99.3%
——30——CVE-2020-5405—99.3%
——30——CVE-2008-0960—99.3%
——30——CVE-2002-0149—99.3%
——30——CVE-2007-3358—99.3%
——30——CVE-2007-1404—99.3%
——30——CVE-2021-35393—99.3%
——30——CVE-2018-10931—99.3%
——30——CVE-2016-4264—99.3%
——30——CVE-2013-2367—99.3%
——30——CVE-2024-23535—99.3%
——30——CVE-2009-2227—99.3%
——30——