// threat_intelligence_dashboard

Dashboard de Amenazas

Vulnerabilidades activamente explotadas según el catálogo CISA KEV (Known Exploited Vulnerabilities)

▶ ¿Cómo se calcula el nivel de amenaza global?

El nivel de amenaza global mostrado en la barra de navegación se calcula en base al número de CVEs activamente explotados publicados en el catálogo CISA KEV (Known Exploited Vulnerabilities) durante las últimas horas:

🟢 BAJA — 0 CVEs nuevos en el feed reciente
🟡 MEDIA — 1 a 2 CVEs nuevos activamente explotados
🟠 ALTA — 3 a 4 CVEs nuevos activamente explotados
🔴 CRÍTICA — 5 o más CVEs nuevos activamente explotados

Fuente: CISA Known Exploited Vulnerabilities Catalog — actualizado cada hora.

CVEs añadidos este mes

1622

Total KEV catalogados

Vendors afectados

// cves_añadidos_este_mes

CVE	Producto	Criticidad	Añadido
CVE-2026-48907	Widget Factory Joomla Content Editor	—	2026-06-16
CVE-2026-54420	LiteSpeed cPanel Plugin	ALTA	2026-06-15
CVE-2026-20262	Cisco Catalyst SD-WAN Manager	MEDIA	2026-06-15
CVE-2026-35273	Oracle PeopleSoft Enterprise PeopleTools	CRÍTICA	2026-06-12
CVE-2026-10520	Ivanti Sentry	CRÍTICA	2026-06-11
CVE-2026-11645	Google Chromium V8	ALTA	2026-06-09
CVE-2026-7473	Arista Extensible Operating System	MEDIA	2026-06-09
CVE-2026-20245	Cisco Catalyst SD-WAN Manager	ALTA	2026-06-09
CVE-2026-42271	BerriAI LiteLLM	ALTA	2026-06-08
CVE-2026-50751	Check Point Security Gateway	CRÍTICA	2026-06-08

// top_vendors_afectados

Microsoft

16

Cisco

9

Apple

6

Ivanti

4

Google

4

Adobe

3

LiteSpeed

2

Oracle

2

BerriAI

2

SolarWinds

2

// catalogo_kev_completo

CVE ID	Producto	Descripción	CVSS	Añadido
CVE-2025-31201	Apple Multiple Products	Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an att…	CRÍTICA	2025-04-17
CVE-2025-31200	Apple Multiple Products	Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execu…	CRÍTICA	2025-04-17
CVE-2021-20035	SonicWall SMA100 Appliances	SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a rem…	MEDIA	2025-04-16
CVE-2024-53150	Linux Kernel	Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attac…	ALTA	2025-04-09
CVE-2024-53197	Linux Kernel	Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physic…	ALTA	2025-04-09
CVE-2025-29824	Microsoft Windows	Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorize…	ALTA	2025-04-08
CVE-2025-30406	Gladinet CentreStack	Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the appli…	CRÍTICA	2025-04-08
CVE-2025-31161	CrushFTP CrushFTP	CrushFTP contains an authentication bypass vulnerability in the HTTP authorization header that allows a remote unauthen…	CRÍTICA	2025-04-07
CVE-2025-22457	Ivanti Connect Secure, Policy Secure, and ZTA Gateways	Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows…	CRÍTICA	2025-04-04
CVE-2025-24813	Apache Tomcat	Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose informa…	CRÍTICA	2025-04-01
CVE-2024-20439	Cisco Smart Licensing Utility	Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacke…	CRÍTICA	2025-03-31
CVE-2025-2783	Google Chromium Mojo	Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an …	ALTA	2025-03-27
CVE-2019-9875	Sitecore CMS and Experience Platform (XP)	Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF mod…	ALTA	2025-03-26
CVE-2019-9874	Sitecore CMS and Experience Platform (XP)	Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF mod…	CRÍTICA	2025-03-26
CVE-2025-30154	reviewdog action-setup GitHub Action	reviewdog action-setup GitHub Action contains an embedded malicious code vulnerability that dumps exposed secrets to Gi…	ALTA	2025-03-24
CVE-2017-12637	SAP NetWeaver	SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca4…	ALTA	2025-03-19
CVE-2024-48248	NAKIVO Backup and Replication	NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitr…	ALTA	2025-03-19
CVE-2025-1316	Edimax IC-7100 IP Camera	Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows …	CRÍTICA	2025-03-19
CVE-2025-30066	tj-actions changed-files GitHub Action	tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker …	ALTA	2025-03-18
CVE-2025-24472	Fortinet FortiOS and FortiProxy	Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain s…	ALTA	2025-03-18
CVE-2025-21590	Juniper Junos OS	Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows …	MEDIA	2025-03-13
CVE-2025-24201	Apple Multiple Products	Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allo…	CRÍTICA	2025-03-13
CVE-2025-24993	Microsoft Windows	Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an …	ALTA	2025-03-11
CVE-2025-24991	Microsoft Windows	Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authori…	MEDIA	2025-03-11
CVE-2025-24985	Microsoft Windows	Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an u…	ALTA	2025-03-11

← Anterior Página 13 / 65 (1622 CVEs total) Siguiente →