Vulnerabilidades explotables hoy
406,443en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,566
- Alto21,522
- Medio20,094
- Bajo2,095
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-689725.9 MED1.4%
——0In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an "invalid armor" message is printed during verification). This is related to use of \f as a marker to denote truncation of a long plaintext line.20dCVE-2021-39691—1.4%
——0——CVE-2020-37229—1.4%
——0——CVE-2021-1032—1.4%
——0——CVE-2022-20178—1.4%
——0——CVE-2021-0990—1.4%
——0——CVE-2023-23433—1.4%
——0——CVE-2021-0987—1.4%
——0——CVE-2026-32343—1.4%
——0——CVE-2021-1015—1.4%
——0——CVE-2022-20185—1.4%
——0——CVE-2026-43109—1.4%
——0——CVE-2025-2509—1.4%
——0——CVE-2025-47371—1.4%
——0——CVE-2021-39786—1.4%
——0——CVE-2025-58991—1.4%
——0——CVE-2022-20536—1.4%
——0——CVE-2025-36133—1.4%
——0——CVE-2022-39089—1.4%
——0——CVE-2025-66595—1.4%
——0——CVE-2026-833237.5 ALT1.4%
——0Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).47dCVE-2026-27183—1.4%
——0——CVE-2026-798287.1 ALT1.4%
——0A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.18dCVE-2023-21641—1.4%
——0——CVE-2024-34747—1.4%
——0——CVE-2021-39662—1.4%
——0——CVE-2025-38738—1.4%
——0——CVE-2025-539197.8 ALT1.4%
——0An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, with weak permissions, during installation and uninstallation. A low-privileged attacker with local access could potentially exploit this, leading to elevation of privileges.20dCVE-2025-277116.7 MED1.4%
——0Incorrect default permissions for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.14dCVE-2026-68303.3 BAJ1.4%
——0nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys and other sensitive secrets from one profile context in another profile, breaking expected security isolation between profiles.8dCVE-2026-529597.8 ALT1.4%
——0In the Linux kernel, the following vulnerability has been resolved:
virt: sev-guest: Do not use host-controlled page order in cleanup path
When issuing an extended guest request (SVM_VMGEXIT_EXT_GUEST_REQUEST),
get_ext_report() allocates a buffer to retrieve a certificate blob from the
host, keeping track of its size in report_req->certs_len.
However, the host may return SNP_GUEST_VMM_ERR_INVALID_LEN, indicating
an invalid buffer size, as well as the expected length of such buffer.
get_ext_report() subsequently updates report_req->certs_len with the
host-controlled value, and cleans up the buffer by computing a page order
from such value. This is incorrect, as the host-provided length may not
match the page order of the original allocation, potentially resulting
in corruption in the page allocator.
Fix this by using alloc_pages_exact() instead, and reusing @npages to
compute the size passed to free_pages_exact(). For consistency, also
use @npages to compute the size when allocating the pages, even though
this last change has no functional effect.111dCVE-2026-67877.8 ALT1.4%
——0Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.7dCVE-2025-49456—1.4%
——0——CVE-2025-58217—1.4%
——0——CVE-2022-20046—1.4%
——0——CVE-2025-46593—1.4%
——0——CVE-2026-213747.8 ALT1.4%
——0Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.7dCVE-2022-33297—1.4%
——0——CVE-2026-588467.8 ALT1.4%
——0In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.39dCVE-2025-629867.1 ALT1.4%
——0Cross-Site Request Forgery (CSRF) vulnerability in FanBridge FanBridge signup fanbridge-signup allows Stored XSS.This issue affects FanBridge signup: from n/a through <= 0.6.25d