Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2727▼ 513 respecto a la semana anterior
Críticas / altas1294▼ 200 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
1567 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.53% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Preauthenticated Cross Site Scripting (XSS): Badge Registration V-2023-012. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: rfIDEAS V-2023-015. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: Elatec V-2023-014. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in Docker Overlay V-2023-013. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Password Exposure V-2024-003. | |
| Modificada | Crítica (9.8) | 1.0% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication V-2024-002. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Insecure Extension Installation by Trusting HTTP Permission Methods on the Server Side V-2024-005. | |
| Modificada | Alta (7.8) | 0.22% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Local Privilege Escalation V-2024-007. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368 allows Unauthenticated APIs for Single-Sign On V-2024-009. | |
| Analizada | Crítica (9.8) | 0.74% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012. | |
| Modificada | Alta (8.8) | 0.78% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Privilege Escalation V-2024-015. | |
| Modificada | Crítica (9.8) | 0.90% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Hardcoded Password V-2024-013. | |
| Modificada | Media (6.1) | 0.53% | — | Printerlogic Vasion PrintPrinterlogic Virtual Appliance | 5/3/2025 | 17/6/2026 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Cross-Site Scripting V-2024-016. | |
| Analizada | Media (6.5) | 0.44% | — | IBM MQ Appliance | 28/2/2025 | 17/6/2026 | IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue. | |
| Analizada | Alta (8.8) | 0.68% | — | IBM MQ Appliance | 28/2/2025 | 17/6/2026 | IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters. | |
| Analizada | Media (4.7) | 0.13% | — | IBM MQ Appliance | 28/2/2025 | 17/6/2026 | IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled. | |
| Analizada | Alta (7.2) | 22% | — | Ivanti Cloud Services Appliance | 11/2/2025 | 17/6/2026 | OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution. | |
| Analizada | Media (5.3) | 1.2% | — | Ivanti Cloud Services Appliance | 11/2/2025 | 17/6/2026 | Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality. | |
| Aplazada | Media (4.3) | 0.34% | — | Cisco Secure Email AND WEB ManagerAICisco Secure Email GatewayAICisco Secure WEB ApplianceAI | 5/2/2025 | 17/6/2026 | A vulnerability in Simple Network Management Protocol (SNMP) polling for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, remote attacker to obtain confidential information about the underlying operating system. This vulnerability exists… | |
| Aplazada | Media (4.6) | 0.10% | — | Arista Cloudvision ApplianceAIArista Dca-350e-cvAI | 10/1/2025 | 17/6/2026 | On Arista CloudVision Appliance (CVA) affected releases running on appliances that support hardware disk encryption (DCA-350E-CV only), the disk encryption might not be successfully performed. This results in the disks remaining unsecured and data on them | |
| Aplazada | Crítica (9.3) | 1.8% | — | Moxa Cellular RoutersAIMoxa Secure RoutersAIMoxa Network Security AppliancesAI | 3/1/2025 | 17/6/2026 | Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulnerability allows OS command injection due to improperly restricted commands, potentially enabling attackers to execute arbitrary code. This poses a significant risk to the system’s… |