// threat_intelligence_dashboard

Dashboard de Amenazas

Vulnerabilidades activamente explotadas según el catálogo CISA KEV (Known Exploited Vulnerabilities)

▶ ¿Cómo se calcula el nivel de amenaza global?

El nivel de amenaza global mostrado en la barra de navegación se calcula en base al número de CVEs activamente explotados publicados en el catálogo CISA KEV (Known Exploited Vulnerabilities) durante las últimas horas:

🟢 BAJA — 0 CVEs nuevos en el feed reciente
🟡 MEDIA — 1 a 2 CVEs nuevos activamente explotados
🟠 ALTA — 3 a 4 CVEs nuevos activamente explotados
🔴 CRÍTICA — 5 o más CVEs nuevos activamente explotados

Fuente: CISA Known Exploited Vulnerabilities Catalog — actualizado cada hora.

CVEs añadidos este mes

1587

Total KEV catalogados

Vendors afectados

// cves_añadidos_este_mes

CVE	Producto	Criticidad	Añadido
CVE-2026-31431	Linux Kernel	ALTA	2026-05-01

// top_vendors_afectados

Microsoft

19

Cisco

7

Apple

7

Synacor

4

Google

4

Fortinet

3

Ivanti

3

SolarWinds

3

SmarterTools

3

Linux

2

// catalogo_kev_completo

CVE ID	Producto	Descripción	CVSS	Añadido
CVE-2020-2551	Oracle Fusion Middleware	Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticate…	CRÍTICA	2023-11-16
CVE-2023-36033	Microsoft Windows	Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privi…	ALTA	2023-11-14
CVE-2023-36025	Microsoft Windows	Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass W…	ALTA	2023-11-14
CVE-2023-36036	Microsoft Windows	Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an atta…	ALTA	2023-11-14
CVE-2023-47246	SysAid SysAid Server	SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution.	CRÍTICA	2023-11-13
CVE-2023-36844	Juniper Junos OS	Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticate…	MEDIA	2023-11-13
CVE-2023-36845	Juniper Junos OS	Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an…	CRÍTICA	2023-11-13
CVE-2023-36846	Juniper Junos OS	Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an una…	MEDIA	2023-11-13
CVE-2023-36847	Juniper Junos OS	Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unau…	MEDIA	2023-11-13
CVE-2023-36851	Juniper Junos OS	Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an una…	MEDIA	2023-11-13
CVE-2023-29552	IETF Service Location Protocol (SLP)	The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticate…	ALTA	2023-11-08
CVE-2023-22518	Atlassian Confluence Data Center and Server	Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in signific…	CRÍTICA	2023-11-07
CVE-2023-46604	Apache ActiveMQ	Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with networ…	CRÍTICA	2023-11-02
CVE-2023-46748	F5 BIG-IP Configuration Utility	F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with n…	ALTA	2023-10-31
CVE-2023-46747	F5 BIG-IP Configuration Utility	F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due …	CRÍTICA	2023-10-31
CVE-2023-5631	Roundcube Webmail	Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run m…	MEDIA	2023-10-26
CVE-2023-20273	Cisco Cisco IOS XE Web UI	Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, th…	ALTA	2023-10-23
CVE-2023-4966	Citrix NetScaler ADC and NetScaler Gateway	Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive informatio…	CRÍTICA	2023-10-18
CVE-2023-20198	Cisco IOS XE Web UI	Cisco IOS XE Web UI contains a privilege escalation vulnerability in the web user interface that could allow a remote, …	CRÍTICA	2023-10-16
CVE-2023-21608	Adobe Acrobat and Reader	Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the c…	ALTA	2023-10-10
CVE-2023-20109	Cisco IOS and IOS XE	Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) featur…	MEDIA	2023-10-10
CVE-2023-41763	Microsoft Skype for Business	Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.	MEDIA	2023-10-10
CVE-2023-36563	Microsoft WordPad	Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.	MEDIA	2023-10-10
CVE-2023-44487	IETF HTTP/2	HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).	ALTA	2023-10-10
CVE-2023-22515	Atlassian Confluence Data Center and Server	Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to c…	CRÍTICA	2023-10-05

← Anterior Página 23 / 64 (1587 CVEs total) Siguiente →