Vulnerabilidades explotables hoy
406,192en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,622
- Alto21,832
- Medio20,363
- Bajo2,114
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-108043.6 BAJ0.2%
——0A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation leads to use of weak hash. Local access is required to approach this attack. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.101dCVE-2024-20106—0.2%
——0——CVE-2026-28550—0.2%
——0——CVE-2024-29783—0.2%
——0——CVE-2023-40643—0.2%
——0——CVE-2025-26448—0.2%
——0——CVE-2023-42653—0.2%
——0——CVE-2018-9400—0.2%
——0——CVE-2023-38459—0.2%
——0——CVE-2023-40641—0.2%
——0——CVE-2023-40633—0.2%
——0——CVE-2018-9374—0.2%
——0——CVE-2023-38465—0.2%
——0——CVE-2022-26452—0.2%
——0——CVE-2018-9399—0.2%
——0——CVE-2022-48461—0.2%
——0——CVE-2025-36902—0.2%
——0——CVE-2023-38442—0.2%
——0——CVE-2026-27670—0.2%
——0——CVE-2023-21138—0.2%
——0——CVE-2022-48446—0.2%
——0——CVE-2024-25987—0.2%
——0——CVE-2024-27235—0.2%
——0——CVE-2018-9346—0.2%
——0——CVE-2025-26462—0.2%
——0——CVE-2023-40132—0.2%
——0——CVE-2022-25716—0.2%
——0——CVE-2018-9398—0.2%
——0——CVE-2023-20717—0.2%
——0——CVE-2026-419632.8 BAJ0.2%
——0Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.6dCVE-2026-27875—0.2%
——0Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data.
This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.17dCVE-2023-48353—0.2%
——0——CVE-2018-9394—0.2%
——0——CVE-2025-546017.0 ALT0.2%
——0An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.99dCVE-2025-327454.2 MED0.2%
——0Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information tampering.26dCVE-2025-20665—0.2%
——0——CVE-2023-30936—0.2%
——0——CVE-2026-907206.7 MED0.2%
——0Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.1dCVE-2023-52348—0.2%
——0——CVE-2026-417045.0 MED0.2%
——0AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response['value']['result']['compile_log_id'] (line 332-338) and passes it to download_and_delete_blob. Separately, any response containing 'exception' goes through format_exception (lines 308-325), which reads exception['blobstore_id'] and also calls download_and_delete_blob. That helper (lines 344-349) calls ResourceManager#get_resource(blob_id) and, in an ensure block, ResourceManager#delete_resource(blob_id). ResourceManager (resource_manager.rb:62-70) calls blobstore.delete(id) on the single shared Director blobstore with no UUID-format check, no ownership check, and no namespace prefix.
Affected versions:
BOSH Director: All versions prior to v282.1.125d