// threat_intelligence_dashboard

Dashboard de Amenazas

Vulnerabilidades activamente explotadas según el catálogo CISA KEV (Known Exploited Vulnerabilities)

▶ ¿Cómo se calcula el nivel de amenaza global?

El nivel de amenaza global mostrado en la barra de navegación se calcula en base al número de CVEs activamente explotados publicados en el catálogo CISA KEV (Known Exploited Vulnerabilities) durante las últimas horas:

🟢 BAJA — 0 CVEs nuevos en el feed reciente
🟡 MEDIA — 1 a 2 CVEs nuevos activamente explotados
🟠 ALTA — 3 a 4 CVEs nuevos activamente explotados
🔴 CRÍTICA — 5 o más CVEs nuevos activamente explotados

Fuente: CISA Known Exploited Vulnerabilities Catalog — actualizado cada hora.

CVEs añadidos este mes

1587

Total KEV catalogados

Vendors afectados

// cves_añadidos_este_mes

CVE	Producto	Criticidad	Añadido
CVE-2026-31431	Linux Kernel	ALTA	2026-05-01

// top_vendors_afectados

Microsoft

19

Cisco

7

Apple

7

Synacor

4

Google

4

Fortinet

3

Ivanti

3

SolarWinds

3

SmarterTools

3

Linux

2

// catalogo_kev_completo

CVE ID	Producto	Descripción	CVSS	Añadido
CVE-2022-22675	Apple macOS	macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code …	ALTA	2022-04-04
CVE-2022-22674	Apple macOS	macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.	MEDIA	2022-04-04
CVE-2021-45382	D-Link Multiple Routers	A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary f…	CRÍTICA	2022-04-04
CVE-2022-26871	Trend Micro Apex Central	An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.	CRÍTICA	2022-03-31
CVE-2022-1040	Sophos Firewall	An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.	CRÍTICA	2022-03-31
CVE-2021-34484	Microsoft Windows	Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.	ALTA	2022-03-31
CVE-2021-28799	QNAP Network Attached Storage (NAS)	QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a…	CRÍTICA	2022-03-31
CVE-2021-21551	Dell dbutil Driver	Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, de…	ALTA	2022-03-31
CVE-2018-10562	Dasan Gigabit Passive Optical Network (GPON) Routers	Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can …	CRÍTICA	2022-03-31
CVE-2018-10561	Dasan Gigabit Passive Optical Network (GPON) Routers	Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can …	CRÍTICA	2022-03-31
CVE-2022-1096	Google Chromium V8	Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit …	ALTA	2022-03-28
CVE-2022-0543	Redis Debian-specific Redis Servers	Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.	CRÍTICA	2022-03-28
CVE-2021-38646	Microsoft Office	Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execu…	ALTA	2022-03-28
CVE-2021-34486	Microsoft Windows	Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.	ALTA	2022-03-28
CVE-2021-26085	Atlassian Confluence Server	Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authoriz…	MEDIA	2022-03-28
CVE-2021-20028	SonicWall Secure Remote Access (SRA)	SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL inject…	CRÍTICA	2022-03-28
CVE-2019-7483	SonicWall SMA100	In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user …	ALTA	2022-03-28
CVE-2018-8440	Microsoft Windows	An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…	ALTA	2022-03-28
CVE-2018-8406	Microsoft DirectX Graphics Kernel (DXGKRNL)	An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…	ALTA	2022-03-28
CVE-2018-8405	Microsoft DirectX Graphics Kernel (DXGKRNL)	An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…	ALTA	2022-03-28
CVE-2017-0213	Microsoft Windows	Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted app…	ALTA	2022-03-28
CVE-2017-0059	Microsoft Internet Explorer	Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted we…	MEDIA	2022-03-28
CVE-2017-0037	Microsoft Edge and Internet Explorer	Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execut…	ALTA	2022-03-28
CVE-2016-7201	Microsoft Edge	The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a deni…	ALTA	2022-03-28
CVE-2016-7200	Microsoft Edge	The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a deni…	ALTA	2022-03-28

← Anterior Página 40 / 64 (1587 CVEs total) Siguiente →