Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3490▲ 842 respecto a la semana anterior
Críticas / altas1668▲ 271 respecto a la semana anterior
Nueva explotación activa (KEV)5→ sin cambios respecto a la semana anterior
Sin puntuar (sin CVSS)256▲ 244 respecto a la semana anterior
–

9826 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.8)0.20%—Intel Oneapi HPC ToolkitIntel Trace Analyzer AND Collector10/5/202317/6/2026
Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable escalation of privilege via local access.
ModificadaAlta (7.8)0.21%—Intel AdvisorIntel CPU RuntimeIntel Distribution FOR PythonIntel Dpc++ Compatibility Tool+2510/5/202317/6/2026
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.
ModificadaMedia (5.5)0.18%—Intel Oneapi HPC ToolkitIntel Trace Analyzer AND Collector10/5/202317/6/2026
Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access.
ModificadaMedia (4.8)0.24%—Arubanetworks ArubaosHP Instantos8/5/202317/6/2026
A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in which this disclosure of…
ModificadaAlta (8.8)1.6%—Arubanetworks ArubaosHP Instantos8/5/202317/6/2026
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
ModificadaAlta (8.8)1.6%—Arubanetworks ArubaosHP Instantos8/5/202317/6/2026
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
ModificadaAlta (8.8)1.6%—Arubanetworks ArubaosHP Instantos8/5/202317/6/2026
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
ModificadaAlta (7.5)0.84%—Arubanetworks ArubaosHP Instantos8/5/202317/6/2026
An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.
ModificadaCrítica (9.8)2.1%—HP ArubaosHP Instantos8/5/202317/6/2026
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability…
ModificadaCrítica (9.8)2.1%—HP ArubaosHP Instantos8/5/202317/6/2026
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability…
ModificadaCrítica (9.8)2.1%—HP ArubaosHP Instantos8/5/202317/6/2026
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability…
ModificadaCrítica (9.8)2.1%—HP ArubaosHP Instantos8/5/202317/6/2026
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability…
ModificadaCrítica (9.8)2.1%—HP ArubaosHP Instantos8/5/202317/6/2026
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability…
ModificadaCrítica (9.8)2.1%—HP ArubaosHP Instantos8/5/202317/6/2026
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability…
ModificadaCrítica (9.8)2.1%—HP ArubaosHP Instantos8/5/202317/6/2026
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability…
ModificadaCrítica (9.8)2.1%—HP ArubaosHP Instantos8/5/202317/6/2026
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability…
ModificadaCrítica (9.8)0.77%—Php-login Project Php-login6/5/202317/6/2026
A vulnerability was found in PHP-Login 1.0. It has been declared as critical. This vulnerability affects the function checkLogin of the file login/scripts/class.loginscript.php of the component POST Parameter Handler. The manipulation of the argument myusername leads to sql injection. The attack can be initiated…
ModificadaMedia (4.8)0.46%—Phpmyfaq5/5/202317/6/2026
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13.
ModificadaMedia (4.8)0.47%—Phpmyfaq5/5/202317/6/2026
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13.
ModificadaCrítica (9.8)0.84%—Cltphp4/5/202317/6/2026
CLTPHP <=6.0 is vulnerable to Improper Input Validation.
ModificadaCrítica (9.8)0.74%—Cltphp4/5/202317/6/2026
CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update.
ModificadaMedia (4.8)0.34%—Douphp3/5/202317/6/2026
A stored cross-site scripting (XSS) vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the unique_id parameter in /admin/article.php.
ModificadaMedia (6.8)0.24%—HP Integrated Lights-out FirmwareHP Proliant Rl300 Firmware1/5/202317/6/2026
A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exploits by attackers with physical access inside the server chassis.
ModificadaCrítica (9.8)0.53%—Phpmyfaq30/4/202317/6/2026
Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13.
ModificadaMedia (5.4)0.56%—Phpmyfaq30/4/202317/6/2026
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13.