Vulnerabilidades explotables hoy
406,192en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,630
- Alto21,866
- Medio20,418
- Bajo2,119
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-22419—0.2%
——0——CVE-2022-48455—0.2%
——0——CVE-2023-38448—0.2%
——0——CVE-2024-20135—0.2%
——0——CVE-2025-22414—0.2%
——0——CVE-2025-473487.8 ALT0.2%
——0Memory corruption while processing identity credential operations in the trusted application.24dCVE-2026-1119933.3 BAJ0.2%
——0A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensitive information. The attack is restricted to local execution. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.12dCVE-2022-48457—0.2%
——0——CVE-2024-40664—0.2%
——0——CVE-2025-134927.0 ALT0.2%
——0A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability
could potentially allow a local attacker to escalate privileges via a race condition when installing packages.13dCVE-2025-58743—0.2%
——0——CVE-2025-473467.8 ALT0.2%
——0Memory corruption while processing a secure logging command in the trusted application.24dCVE-2025-473887.8 ALT0.2%
——0Memory corruption while passing pages to DSP with an unaligned starting address.24dCVE-2023-48344—0.2%
——0——CVE-2026-24509—0.2%
——0——CVE-2023-48349—0.2%
——0——CVE-2024-27233—0.2%
——0——CVE-2026-981535.5 MED0.2%
——0In the Linux kernel, the following vulnerability has been resolved:
nvme: fix racy access to FDP placement id array
nvme_query_fdp_info() is called per-path and therefore prone to races.
It populates head->nr_plids/head->plids for fdp registration.
But nothing protects that pair from concurrent access - two paths scanning
the same namespace can race to populate it.
Avoid the race by moving this initialization work to nvme_alloc_ns_head()
which is called once per shared namespace.10dCVE-2025-26452—0.2%
——0——CVE-2023-48341—0.2%
——0——CVE-2022-48458—0.2%
——0——CVE-2017-13308—0.2%
——0——CVE-2024-40652—0.2%
——0——CVE-2025-20764—0.1%
——0——CVE-2022-48454—0.2%
——0——CVE-2024-27224—0.2%
——0——CVE-2026-0107—0.2%
——0——CVE-2024-29757—0.2%
——0——CVE-2024-39430—0.2%
——0——CVE-2018-9449—0.2%
——0——CVE-2025-473807.8 ALT0.2%
——0Memory corruption while preprocessing IOCTLs in sensors.24dCVE-2026-146814.2 MED0.2%
——0Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS settings are more permissive than the GSS settings, the connection may continue with lesser protection. Within major versions 17-18, minor versions before PostgreSQL 18.6 and 17.11 are affected. Versions before PostgreSQL 17 are unaffected.63dCVE-2025-26432—0.2%
——0——CVE-2025-485977.8 ALT0.2%
——0In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.24dCVE-2025-26429—0.2%
——0——CVE-2022-33231—0.2%
——0——CVE-2023-38463—0.2%
——0——CVE-2023-21031—0.2%
——0——CVE-2023-38445—0.2%
——0——CVE-2023-38462—0.2%
——0——