Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2737▼ 486 respecto a la semana anterior
Críticas / altas1302▼ 188 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior
551 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.97% | — | Librehealth EHR | 6/6/2022 | 17/6/2026 | LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS. | |
| Modificada | Crítica (9.8) | 1.7% | — | Librenms | 2/6/2022 | 17/6/2026 | LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters. | |
| Modificada | Media (6.1) | 0.72% | — | Librenms | 2/6/2022 | 17/6/2026 | LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php. | |
| Modificada | Alta (8.8) | 1.0% | — | GNU Libredwg | 23/5/2022 | 17/6/2026 | A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file. | |
| Modificada | Alta (8.8) | 1.0% | — | GNU Libredwg | 23/5/2022 | 17/6/2026 | A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file. | |
| Modificada | Crítica (9.8) | 1.2% | — | Janeczku Calibre-web | 16/5/2022 | 17/6/2026 | Calibre-Web before 0.6.18 allows user table SQL Injection. | |
| Modificada | Media (5.4) | 0.87% | — | Librehealth EHR | 5/5/2022 | 17/6/2026 | In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\find_order_popup.php leads to multiple cross-site scripting (XSS) vulnerabilities. | |
| Modificada | Media (5.4) | 0.87% | — | Librehealth EHR | 5/5/2022 | 17/6/2026 | In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sl_eob_process.php leads to multiple cross-site scripting (XSS) vulnerabilities. | |
| Modificada | Alta (8.8) | 1.5% | — | Librehealth EHR | 5/5/2022 | 17/6/2026 | In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php via interface\billing\payment_master.inc.php leads to SQL injection. | |
| Modificada | Crítica (9.1) | 1.3% | — | Janeczku Calibre-web | 4/4/2022 | 17/6/2026 | Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18. | |
| Modificada | Crítica (9.9) | 1.1% | — | Janeczku Calibre-web | 4/4/2022 | 17/6/2026 | Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18. | |
| Modificada | Media (4.3) | 0.66% | — | Janeczku Calibre-web | 3/4/2022 | 17/6/2026 | Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16. | |
| Modificada | Media (4.3) | 0.76% | — | Janeczku Calibre-web | 3/4/2022 | 17/6/2026 | Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16. | |
| Modificada | Crítica (9.9) | 0.98% | — | Janeczku Calibre-web | 7/3/2022 | 17/6/2026 | Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17. | |
| Modificada | Crítica (9.8) | 1.3% | — | Janeczku Calibre-web | 7/3/2022 | 17/6/2026 | Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17. | |
| Modificada | Media (4.8) | 0.62% | — | Librenms | 27/2/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2. | |
| Modificada | Alta (7.5) | 0.95% | — | LibreofficeFedoraproject Fedora | 24/2/2022 | 17/6/2026 | LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally… | |
| Modificada | Media (5.4) | 0.85% | — | Librenms | 15/2/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0. | |
| Modificada | Media (6.5) | 1.1% | — | Librenms | 15/2/2022 | 17/6/2026 | Missing Authorization in Packagist librenms/librenms prior to 22.2.0. | |
| Modificada | Media (6.5) | 1.0% | — | Librenms | 15/2/2022 | 17/6/2026 | Improper Authorization in Packagist librenms/librenms prior to 22.2.0. | |
| Modificada | Alta (8.8) | 1.2% | — | Librenms | 14/2/2022 | 17/6/2026 | Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0. | |
| Modificada | Media (6.1) | 1.00% | — | Librenms | 14/2/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0. | |
| Modificada | Media (5.4) | 0.85% | — | Librenms | 14/2/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0. | |
| Modificada | Crítica (9.8) | 0.96% | — | Janeczku Calibre-web | 30/1/2022 | 17/6/2026 | Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16. | |
| Modificada | Media (6.5) | 0.67% | — | Janeczku Calibre-web | 30/1/2022 | 17/6/2026 | Improper Access Control in Pypi calibreweb prior to 0.6.16. |