Vulnerabilidades explotables hoy
367,069en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,242
- Alto9,242
- Medio5,232
- Bajo501
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-47404—0.0%
——0——CVE-2026-0150—0.0%
——0——CVE-2024-53016—0.0%
——0——CVE-2025-48641—0.0%
——0——CVE-2023-20687—0.0%
——0——CVE-2026-20439—0.0%
——0——CVE-2026-0133—0.0%
——0——CVE-2026-27875—0.0%
——0Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data.
This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.9dCVE-2024-53018—0.0%
——0——CVE-2026-146814.2 MED0.0%
——0Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS settings are more permissive than the GSS settings, the connection may continue with lesser protection. Within major versions 17-18, minor versions before PostgreSQL 18.6 and 17.11 are affected. Versions before PostgreSQL 17 are unaffected.1dCVE-2025-58313—0.0%
——0——CVE-2026-21002—0.0%
——0——CVE-2026-0142—0.0%
——0——CVE-2026-9266—0.0%
——0——CVE-2026-34857—0.0%
——0——CVE-2025-66326—0.0%
——0——CVE-2024-43766—0.0%
——0——CVE-2023-20684—0.0%
——0——CVE-2025-58316—0.0%
——0——CVE-2025-23364—0.0%
——0——CVE-2026-213667.8 ALT0.0%
——0Memory corruption while processing a packet with a size close to the maximum allowed value.25dCVE-2026-28537—0.0%
——0——CVE-2025-47381—0.0%
——0——CVE-2026-00163.3 BAJ0.0%
——0In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2026-20442—0.0%
——0——CVE-2023-20788—0.0%
——0——CVE-2025-36889—0.0%
——0——CVE-2025-48569—0.0%
——0——CVE-2023-20623—0.0%
——0——CVE-2026-00705.5 MED0.0%
——0In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2025-68962—0.0%
——0——CVE-2025-48960—0.0%
——0——CVE-2025-47330—0.0%
——0——CVE-2025-47378—0.0%
——0——CVE-2025-15548—0.0%
——0——CVE-2025-48575—0.0%
——0——CVE-2022-20243—0.0%
——0——CVE-2026-28538—0.0%
——0——CVE-2026-440594.5 MED0.0%
——0A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause a minor service disruption.39dCVE-2026-240807.8 ALT0.0%
——0Memory Corruption when handling malformed request parameters in the fingerprint TA.25d