Vulnerabilidades explotables hoy
406,192en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,623
- Alto21,844
- Medio20,400
- Bajo2,119
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-21104—0.2%
——0——CVE-2025-20772—0.2%
——0——CVE-2025-20775—0.2%
——0——CVE-2026-28542—0.2%
——0——CVE-2026-26104—0.2%
——0——CVE-2025-20771—0.2%
——0——CVE-2023-48354—0.2%
——0——CVE-2025-32346—0.2%
——0——CVE-2024-20125—0.2%
——0——CVE-2023-48355—0.2%
——0——CVE-2026-20429—0.2%
——0——CVE-2025-48568—0.2%
——0——CVE-2023-48358—0.2%
——0——CVE-2022-39886—0.2%
——0——CVE-2026-00543.3 BAJ0.2%
——0In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.46dCVE-2023-52347—0.2%
——0——CVE-2022-39887—0.2%
——0——CVE-2026-735946.4 MED0.2%
——0Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Protection mechanism bypass.16dCVE-2023-33046—0.2%
——0——CVE-2023-40648—0.2%
——0——CVE-2022-23826—0.2%
——0——CVE-2022-39847—0.2%
——0——CVE-2024-47032—0.2%
——0——CVE-2023-40108—0.2%
——0——CVE-2025-20777—0.2%
——0——CVE-2023-21141—0.2%
——0——CVE-2025-207866.7 MED0.2%
——0In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149882; Issue ID: MSV-4673.24dCVE-2025-6182—0.2%
——0——CVE-2026-114812.5 BAJ0.2%
——0A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument content_hash can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.100dCVE-2026-286303.3 BAJ0.2%
——0In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.46dCVE-2026-45413—0.2%
——0MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.1, user passwords are stored using unsalted MD5 hashes, making them trivially crackable via rainbow tables or GPU-accelerated brute force (hashcat). This vulnerability is fixed in 2.9.1.100dCVE-2022-48445—0.2%
——0——CVE-2025-207846.7 MED0.2%
——0In display, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182882; Issue ID: MSV-4683.24dCVE-2025-20774—0.2%
——0——CVE-2025-20773—0.2%
——0——CVE-2024-40669—0.2%
——0——CVE-2024-31327—0.2%
——0——CVE-2026-1052087.7 ALT0.2%
——0ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent identifier and wins a timing race can call /v2/idp_intents or /v2/sessions to steal the victim's IdP tokens or hijack their session.2dCVE-2025-207836.7 MED0.2%
——0In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182882; Issue ID: MSV-4684.24dCVE-2023-52536—0.2%
——0——