Vulnerabilidades explotables hoy
406,199en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,592
- Alto21,760
- Medio20,279
- Bajo2,104
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-486277.8 ALT0.3%
——0In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.24dCVE-2026-20988—0.3%
——0——CVE-2026-20425—0.3%
——0——CVE-2025-473537.8 ALT0.3%
——0Memory corruption while processing request sent from GVM.13dCVE-2023-21126—0.3%
——0——CVE-2026-20427—0.3%
——0——CVE-2025-55717—0.3%
——0——CVE-2026-20441—0.3%
——0——CVE-2023-42750—0.3%
——0——CVE-2025-135936.1 MED0.3%
——0Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.24dCVE-2023-32479—0.3%
——0——CVE-2023-21189—0.3%
——0——CVE-2023-28576—0.3%
——0——CVE-2024-40649—0.3%
——0——CVE-2021-0564—0.3%
——0——CVE-2023-30917—0.3%
——0——CVE-2023-20962—0.3%
——0——CVE-2026-1002996.8 MED0.3%
——0In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption.32dCVE-2023-2197—0.3%
——0——CVE-2026-20428—0.3%
——0——CVE-2024-58045—0.3%
——0——CVE-2024-34734—0.3%
——0——CVE-2026-33697—0.3%
——0——CVE-2026-183434.4 MED0.3%
——0IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.17dCVE-2023-20927—0.3%
——0——CVE-2025-270336.1 MED0.3%
——0Information disclosure while running video usecase having rogue firmware.36dCVE-2024-58048—0.3%
——0——CVE-2023-52346—0.3%
——0——CVE-2025-207787.8 ALT0.3%
——0In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184870; Issue ID: MSV-4729.24dCVE-2022-47325—0.3%
——0——CVE-2023-21345—0.3%
——0——CVE-2023-21029—0.3%
——0——CVE-2025-207687.8 ALT0.3%
——0In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4805.13dCVE-2025-665936.1 MED0.3%
——0An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.24dCVE-2025-665926.1 MED0.3%
——0An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.24dCVE-2026-945918.4 ALT0.3%
——0Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and are identical across every installation. An attacker with a copy of the installation package can recover this key and initialization vector, and can then decrypt the stored credentials of any specific installation to which the attacker separately obtains the encrypted configuration file.25dCVE-2023-21143—0.3%
——0——CVE-2026-28546—0.3%
——0——CVE-2025-485367.8 ALT0.3%
——0In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.24dCVE-2024-25989—0.3%
——0——