Vulnerabilidades explotables hoy
406,192en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698
Distribución · última ventana
- Crítico5,632
- Alto21,880
- Medio20,425
- Bajo2,120
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-48345—0.2%
——0——CVE-2024-20121—0.2%
——0——CVE-2022-39879—0.2%
——0——CVE-2023-38457—0.2%
——0——CVE-2024-20108—0.2%
——0——CVE-2022-48448—0.2%
——0——CVE-2025-473437.8 ALT0.2%
——0Memory corruption while processing a video session to set video parameters.24dCVE-2023-40640—0.2%
——0——CVE-2026-31430—0.2%
——0——CVE-2026-623642.3 BAJ0.2%
——0wlc is a Weblate command-line client using Weblate's REST API. Prior to 2.0.1, automatically discovered configuration from .weblate, .weblate.ini, or weblate.ini can select the API URL while an unscoped API token is supplied through WLC_KEY or --key without a matching WLC_URL or --url. When wlc runs in an untrusted repository, pull request checkout, or directory with untrusted ancestor configuration, it can send the token to an attacker-controlled project-configured URL. URL-scoped keys in [keys] are not affected. This issue is fixed in version 2.0.1.35dCVE-2025-207967.8 ALT0.1%
——0In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10314745; Issue ID: MSV-5553.24dCVE-2025-20769—0.2%
——0——CVE-2018-9431—0.2%
——0——CVE-2025-473458.4 ALT0.2%
——0Cryptographic issue may occur while encrypting license data.24dCVE-2025-22439—0.2%
——0——CVE-2022-48459—0.2%
——0——CVE-2024-20110—0.2%
——0——CVE-2025-473397.8 ALT0.2%
——0Memory corruption while deinitializing a HDCP session.24dCVE-2024-47012—0.2%
——0——CVE-2023-48350—0.2%
——0——CVE-2024-34724—0.2%
——0——CVE-2025-20671—0.2%
——0——CVE-2023-48343—0.2%
——0——CVE-2026-788077.1 ALT0.2%
——0An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c39dCVE-2025-26434—0.2%
——0——CVE-2026-569148.4 ALT0.2%
——0In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.40dCVE-2025-270396.6 MED0.2%
——0Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.23dCVE-2023-38461—0.2%
——0——CVE-2025-48542—0.2%
——0——CVE-2025-26450—0.2%
——0——CVE-2025-22417—0.2%
——0——CVE-2026-814527.0 ALT0.2%
——0Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Denial of Service.11dCVE-2025-207637.8 ALT0.2%
——0In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267218; Issue ID: MSV-5032.13dCVE-2024-29784—0.2%
——0——CVE-2024-40655—0.2%
——0——CVE-2025-20767—0.1%
——0——CVE-2026-329776.3 MED0.2%
——0OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFile commit step that uses an unanchored container path during the final move operation. An attacker can exploit a time-of-check-time-of-use race condition by modifying parent paths inside the sandbox to redirect committed files outside the validated writable path within the container mount namespace.98dCVE-2024-34663—0.2%
——0——CVE-2024-53016—0.2%
——0——CVE-2025-20766—0.1%
——0——