Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3553▲ 911 respecto a la semana anterior
Críticas / altas1685▲ 292 respecto a la semana anterior
Nueva explotación activa (KEV)5→ sin cambios respecto a la semana anterior
Sin puntuar (sin CVSS)256▲ 244 respecto a la semana anterior
9827 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.88% | — | Phpmyfaq | 31/3/2023 | 17/6/2026 | Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | |
| Modificada | Media (5.4) | 0.48% | — | Phpmyfaq | 31/3/2023 | 17/6/2026 | Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | |
| Modificada | Media (4.8) | 0.53% | — | Phpmyfaq | 31/3/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | |
| Modificada | Media (4.8) | 0.47% | — | Phpmyfaq | 31/3/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | |
| Modificada | Media (5.4) | 0.61% | — | Phpmyfaq | 31/3/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | |
| Modificada | Media (4.7) | 0.60% | — | Phpmyfaq | 31/3/2023 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | |
| Modificada | Crítica (9.8) | 0.72% | — | Phpmyfaq | 31/3/2023 | 17/6/2026 | Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | |
| Modificada | Crítica (9.8) | 0.83% | — | Phpgurukul Park Ticketing Management System | 27/3/2023 | 17/6/2026 | Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter. | |
| Modificada | Media (4.8) | 0.46% | — | Phpgurukul Park Ticketing Management System | 27/3/2023 | 17/6/2026 | Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Admin Name parameter. | |
| Modificada | Media (6.1) | 0.41% | — | Mtrv Teachpress | 23/3/2023 | 17/6/2026 | Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 8.1.8 versions. | |
| Modificada | Media (5.4) | 0.45% | — | HP Integrated Lights-out 4HP Integrated Lights-out 5HP Integrated Lights-out 6 | 22/3/2023 | 17/6/2026 | A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out. | |
| Modificada | Alta (8.8) | 1.1% | — | HPE Arubaos-cx | 22/3/2023 | 17/6/2026 | — | |
| Modificada | Media (6.1) | 0.33% | — | HPE Flexfabric 5700 40xg 2qsfp+ FirmwareHPE Flexfabric 5700 48G 4XG 2qsfp+ Firmware | 22/3/2023 | 17/6/2026 | Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch Series version R2432P61… | |
| Modificada | Alta (8.8) | 0.26% | — | Obox Launchpad - Coming Soon & Maintenance Mode Plugin | 17/3/2023 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin <= 1.0.13 versions. | |
| Modificada | Alta (8.8) | 0.63% | — | Richplugins Plugin FOR Google Reviews | 15/3/2023 | 17/6/2026 | SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions. | |
| Modificada | Crítica (9.8) | 1.1% | — | Phpgurukul ART Gallery Management System | 15/3/2023 | 17/6/2026 | Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page. | |
| Modificada | Crítica (9.8) | 0.62% | — | Phpgurukul BP Monitoring Management System | 14/3/2023 | 17/6/2026 | BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page. | |
| Modificada | Media (5.5) | 0.19% | — | HPE Superdome Flex 280 Server FirmwareHPE Superdome Flex Server Firmware | 10/3/2023 | 17/6/2026 | A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to allow disclosure of information. HPE has made the following software to resolve the vulnerability in HPE Superdome Flex Servers v3.65.8 and Superdome Flex 280… | |
| Modificada | Media (6.1) | 3.9% | 💥 Exploit | Phpipam | 8/3/2023 | 17/6/2026 | phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php. | |
| Modificada | Media (4.8) | 0.47% | — | Phpipam | 7/3/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2. | |
| Modificada | Alta (7.2) | 3.0% | 💥 Exploit | Phpipam | 7/3/2023 | 17/6/2026 | SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2. | |
| Modificada | Alta (7.5) | 0.81% | — | Phpseclib | 3/3/2023 | 17/6/2026 | Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields. | |
| Modificada | Media (6.2) | 0.95% | — | PHP | 1/3/2023 | 19/7/2026 | In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid. | |
| Modificada | Crítica (9.8) | 0.62% | — | HPE Serviceguard FOR Linux | 1/3/2023 | 17/6/2026 | Unauthenticated server side request forgery in HPE Serviceguard Manager | |
| Modificada | Crítica (9.8) | 0.71% | — | HPE Serviceguard FOR Linux | 1/3/2023 | 17/6/2026 | Pre-auth memory corruption in HPE Serviceguard |