Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2729▼ 513 respecto a la semana anterior

Críticas / altas1298▼ 212 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior

445 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-33146	Modificada	Alta (7.8)	0.84%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	14/6/2023	17/6/2026	Microsoft Office Remote Code Execution Vulnerability
CVE-2023-33133	Modificada	Alta (7.8)	44%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Long Term Servicing Channel Microsoft Office Online Server	14/6/2023	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33131	Modificada	Alta (8.8)	5.7%	💥 Exploit	Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook Microsoft Outlook RT	14/6/2023	17/6/2026	Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-32029	Modificada	Alta (7.8)	54%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	14/6/2023	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-29344	Modificada	Alta (7.8)	0.92%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	5/6/2023	17/6/2026	Microsoft Office Remote Code Execution Vulnerability
CVE-2022-35742	Modificada	Alta (7.5)	22%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook	1/6/2023	17/6/2026	Microsoft Outlook Denial of Service Vulnerability
CVE-2023-29335	Modificada	Alta (7.5)	1.2%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 20h2+12	9/5/2023	17/6/2026	Microsoft Word Security Feature Bypass Vulnerability
CVE-2023-29333	Modificada	Baja (3.3)	0.56%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	9/5/2023	17/6/2026	Microsoft Access Denial of Service Vulnerability
CVE-2023-24953	Modificada	Alta (7.8)	0.70%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+1	9/5/2023	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-28311	Modificada	Alta (7.8)	2.7%	💥 Exploit	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/4/2023	17/6/2026	Microsoft Word Remote Code Execution Vulnerability
CVE-2023-28285	Modificada	Alta (7.8)	3.0%	💥 Exploit	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	11/4/2023	17/6/2026	Microsoft Office Remote Code Execution Vulnerability
CVE-2023-1871	Modificada	Media (4.3)	0.28%	—	Plugin Yourchannel	5/4/2023	17/6/2026	The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the deleteLang function. This makes it possible for unauthenticated attackers to reset the plugin's quick language translation settings via a…
CVE-2023-1870	Modificada	Media (4.3)	0.30%	—	Plugin Yourchannel	5/4/2023	17/6/2026	The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the saveLang function. This makes it possible for unauthenticated attackers to change the plugin's quick language translation settings via a…
CVE-2023-1869	Modificada	Media (4.8)	0.48%	—	Plugin Yourchannel	5/4/2023	17/6/2026	The YourChannel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrative-level permissions and above, to inject…
CVE-2023-1868	Modificada	Media (5.3)	0.61%	—	Plugin Yourchannel	5/4/2023	17/6/2026	The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when clearing the plugin cache via the yrc_clear_cache GET parameter in versions up to, and including, 1.2.3. This makes it possible for unauthenticated attackers to clear the plugin's cache.
CVE-2023-1867	Modificada	Media (4.3)	0.30%	—	Plugin Yourchannel	5/4/2023	17/6/2026	The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to change the plugin's settings via a forged request granted they can…
CVE-2023-1866	Modificada	Media (4.3)	0.30%	—	Plugin Yourchannel	5/4/2023	17/6/2026	The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the clearKeys function. This makes it possible for unauthenticated attackers to reset the plugin's channel settings via a forged request…
CVE-2023-1865	Modificada	Media (6.5)	0.70%	—	Plugin Yourchannel	5/4/2023	17/6/2026	The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when resetting plugin settings via the yrc_nuke GET parameter in versions up to, and including, 1.2.3. This makes it possible for unauthenticated attackers to delete YouTube channels from the plugin.
CVE-2023-24910	Modificada	Alta (7.8)	0.39%	—	Microsoft 365 Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Windows 10 1607+11	14/3/2023	17/6/2026	Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-23399	Modificada	Alta (7.8)	2.5%	💥 Exploit	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+2	14/3/2023	17/6/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-23398	Modificada	Alta (7.1)	0.62%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	14/3/2023	17/6/2026	Microsoft Excel Spoofing Vulnerability
CVE-2023-23397	Analizada	Crítica (9.8)	97%	⚠ Explotación activa💥 PoC	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Outlook	14/3/2023	17/6/2026	Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2023-21716	Modificada	Crítica (9.8)	85%	💥 PoC	Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server Microsoft Office WEB Apps+4	14/2/2023	19/8/2026	Microsoft Word Remote Code Execution Vulnerability
CVE-2023-21714	Modificada	Media (5.5)	0.60%	—	Microsoft 365 Apps Microsoft Office Long Term Servicing Channel	14/2/2023	19/8/2026	Microsoft Office Information Disclosure Vulnerability
CVE-2022-4783	Modificada	Media (5.4)	0.47%	—	Youtube Channel Gallery Project Youtube Channel Gallery	13/2/2023	17/6/2026	The Youtube Channel Gallery WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks