Vulnerabilidades explotables hoy
406,313en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,562
- Alto21,577
- Medio20,086
- Bajo2,090
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2022-20266—1.1%
——0——CVE-2023-25188—1.1%
——0——CVE-2024-20058—1.1%
——0——CVE-2024-25992—1.1%
——0——CVE-2025-36051—1.1%
——0——CVE-2021-0871—1.1%
——0——CVE-2024-0017—1.0%
——0——CVE-2022-20367—1.0%
——0——CVE-2026-86725.1 MED1.0%
——0Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords.
This issue affects Avantra: before 25.3.0.101dCVE-2025-53696—1.0%
——0——CVE-2026-218104.4 MED1.0%
——0HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary.65dCVE-2026-964255.5 MED1.0%
——0Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus14dCVE-2022-20204—1.0%
——0——CVE-2026-970263.9 BAJ1.0%
——0Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0777). On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation failures (denial of service); tampered content would fail signature/digest verification rather than being trusted.33dCVE-2025-54642—1.0%
——0——CVE-2024-36332—1.0%
——0——CVE-2026-407035.4 MED1.0%
——0A cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.6dCVE-2024-20892—1.0%
——0——CVE-2026-49365.1 MED1.0%
——0IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key seeds that result in an AES key with reduced strength. An attacker with access to the service processor or HMC could exploit this weakness to derive the encryption key and access the data.68dCVE-2026-41307.1 ALT1.0%
——0There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.46dCVE-2026-920685.4 MED1.0%
——0Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.27dCVE-2022-33303—1.0%
——0——CVE-2025-0077—1.0%
——0——CVE-2023-48412—1.0%
——0——CVE-2022-20080—1.0%
——0——CVE-2024-47290—1.0%
——0——CVE-2021-39748—1.0%
——0——CVE-2025-439147.5 ALT1.0%
——0Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.14dCVE-2024-20048—1.0%
——0——CVE-2021-39661—1.0%
——0——CVE-2022-20002—1.0%
——0——CVE-2025-54641—1.0%
——0——CVE-2026-1077835.9 MED1.0%
——0Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts.
To remediate this issue, users should upgrade to version 5.0.306 or later. After upgrading, review PowerShell transcripts and log stores for previously disclosed passwords and rotate any affected IAM console passwords.23dCVE-2022-26466—1.0%
——0——CVE-2026-640434.7 MED1.0%
——0In the Linux kernel, the following vulnerability has been resolved:
ovpn: fix race between deleting interface and adding new peer
While deleting an existing ovpn interface, there is a very
narrow window where adding a new peer via netlink may cause
the netdevice to hang and prevent its unregistration.
It may happen during ovpn_dellink(), when all existing peers are
freed and the device is queued for deregistration, but a
CMD_PEER_NEW message comes in adding a new peer that takes again
a reference to the netdev.
At this point there is no way to release the device because we are
under the assumption that all peers were already released.
Fix the race condition by releasing all peers in ndo_uninit(),
when the netdevice has already been removed from the netdev
list.
Also ovpn_peer_add() has now an extra check that forces the
function to bail out if the device reg_state is not REGISTERED.
This way any incoming CMD_PEER_NEW racing with the interface
deletion routine will simply stop before adding the peer.
Note that the above check happens while holding the netdev_lock
to prevent racing netdev state changes.
ovpn_dellink() is now empty and can be removed.27dCVE-2022-20115—1.0%
——0——CVE-2022-48431—1.0%
——0——CVE-2024-31314—1.0%
——0——CVE-2023-33036—1.0%
——0——CVE-2025-453767.5 ALT1.0%
——0Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.24d