// threat_intelligence_dashboard

Dashboard de Amenazas

Vulnerabilidades activamente explotadas según el catálogo CISA KEV (Known Exploited Vulnerabilities)

▶ ¿Cómo se calcula el nivel de amenaza global?

El nivel de amenaza global mostrado en la barra de navegación se calcula en base al número de CVEs activamente explotados publicados en el catálogo CISA KEV (Known Exploited Vulnerabilities) durante las últimas horas:

🟢 BAJA — 0 CVEs nuevos en el feed reciente
🟡 MEDIA — 1 a 2 CVEs nuevos activamente explotados
🟠 ALTA — 3 a 4 CVEs nuevos activamente explotados
🔴 CRÍTICA — 5 o más CVEs nuevos activamente explotados

Fuente: CISA Known Exploited Vulnerabilities Catalog — actualizado cada hora.

CVEs añadidos este mes

1543

Total KEV catalogados

Vendors afectados

// cves_añadidos_este_mes

CVE	Producto	Criticidad	Añadido
CVE-2025-47813	Wing FTP Server Wing FTP Server	MEDIA	2026-03-16
CVE-2026-3910	Google Chromium V8	ALTA	2026-03-13
CVE-2026-3909	Google Skia	ALTA	2026-03-13
CVE-2025-68613	n8n n8n	CRÍTICA	2026-03-11
CVE-2021-22054	Omnissa Workspace One UEM	ALTA	2026-03-09
CVE-2025-26399	SolarWinds Web Help Desk	CRÍTICA	2026-03-09
CVE-2026-1603	Ivanti Endpoint Manager (EPM)	ALTA	2026-03-09
CVE-2017-7921	Hikvision Multiple Products	CRÍTICA	2026-03-05
CVE-2021-22681	Rockwell Multiple Products	CRÍTICA	2026-03-05
CVE-2023-43000	Apple Multiple Products	ALTA	2026-03-05

// top_vendors_afectados

Microsoft

14

Apple

6

Google

5

Cisco

4

Fortinet

4

SolarWinds

3

Broadcom

3

SmarterTools

3

Gladinet

3

Ivanti

2

// catalogo_kev_completo

CVE ID	Producto	Descripción	CVSS	Añadido
CVE-2024-30088	Microsoft Windows	Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow…	ALTA	2024-10-15
CVE-2024-9380	Ivanti Cloud Services Appliance (CSA)	Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console whic…	ALTA	2024-10-09
CVE-2024-9379	Ivanti Cloud Services Appliance (CSA)	Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior…	MEDIA	2024-10-09
CVE-2024-23113	Fortinet Multiple Products	Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauth…	CRÍTICA	2024-10-09
CVE-2024-43573	Microsoft Windows	Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidenti…	MEDIA	2024-10-08
CVE-2024-43572	Microsoft Windows	Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.	ALTA	2024-10-08
CVE-2024-43047	Qualcomm Multiple Chipsets	Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while mainta…	ALTA	2024-10-08
CVE-2024-45519	Synacor Zimbra Collaboration Suite (ZCS)	Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allo…	CRÍTICA	2024-10-03
CVE-2024-29824	Ivanti Endpoint Manager (EPM)	Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated atta…	ALTA	2024-10-02
CVE-2019-0344	SAP Commerce Cloud	SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the med…	CRÍTICA	2024-09-30
CVE-2020-15415	DrayTek Multiple Vigor Routers	DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfuncti…	CRÍTICA	2024-09-30
CVE-2023-25280	D-Link DIR-820 Router	D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to …	CRÍTICA	2024-09-30
CVE-2024-7593	Ivanti Virtual Traffic Manager	Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated at…	CRÍTICA	2024-09-24
CVE-2024-8963	Ivanti Cloud Services Appliance (CSA)	Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticate…	CRÍTICA	2024-09-19
CVE-2020-14644	Oracle WebLogic Server	Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthe…	CRÍTICA	2024-09-18
CVE-2022-21445	Oracle ADF Faces	Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vu…	CRÍTICA	2024-09-18
CVE-2020-0618	Microsoft SQL Server	Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectl…	ALTA	2024-09-18
CVE-2024-27348	Apache HugeGraph-Server	Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute…	CRÍTICA	2024-09-18
CVE-2014-0502	Adobe Flash Player	Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.	ALTA	2024-09-17
CVE-2013-0648	Adobe Flash Player	Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allow…	ALTA	2024-09-17
CVE-2013-0643	Adobe Flash Player	Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote …	ALTA	2024-09-17
CVE-2014-0497	Adobe Flash Player	Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.	CRÍTICA	2024-09-17
CVE-2024-6670	Progress WhatsUp Gold	Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the us…	CRÍTICA	2024-09-16
CVE-2024-43461	Microsoft Windows	Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerabilit…	ALTA	2024-09-16
CVE-2024-8190	Ivanti Cloud Services Appliance	Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console whic…	ALTA	2024-09-13

← Anterior Página 15 / 62 (1543 CVEs total) Siguiente →