Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2739▼ 510 respecto a la semana anterior

Críticas / altas1303▼ 212 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior

445 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-0282	Modificada	Media (5.4)	0.51%	—	Plugin Yourchannel	6/2/2023	17/6/2026	The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.
CVE-2022-4833	Modificada	Media (5.4)	0.55%	—	Plugin Yourchannel	6/2/2023	17/6/2026	The YourChannel: Everything you want in a YouTube plugin WordPress plugin before 1.2.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used…
CVE-2022-4756	Modificada	Media (5.4)	0.60%	—	MY Youtube Channel Project MY Youtube Channel	6/2/2023	17/6/2026	The My YouTube Channel WordPress plugin before 3.23.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as…
CVE-2023-0447	Modificada	Media (4.3)	0.59%	—	MY Youtube Channel Project MY Youtube Channel	23/1/2023	17/6/2026	The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the clear_all_cache function in versions up to, and including, 3.0.12.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to clear the plugin's cache.
CVE-2023-0446	Modificada	Media (5.5)	0.57%	—	MY Youtube Channel Project MY Youtube Channel	23/1/2023	17/6/2026	The My YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 3.0.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above,…
CVE-2023-21741	Modificada	Alta (7.1)	1.8%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Visio	10/1/2023	17/6/2026	Microsoft Office Visio Information Disclosure Vulnerability
CVE-2023-21738	Modificada	Alta (7.8)	0.70%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	10/1/2023	17/6/2026	Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21737	Modificada	Alta (7.8)	0.72%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Visio	10/1/2023	17/6/2026	Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21736	Modificada	Alta (7.8)	0.72%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Visio	10/1/2023	17/6/2026	Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21735	Modificada	Alta (7.8)	0.72%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	10/1/2023	17/6/2026	Microsoft Office Remote Code Execution Vulnerability
CVE-2023-21734	Modificada	Alta (7.8)	0.92%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	10/1/2023	17/6/2026	Microsoft Office Remote Code Execution Vulnerability
CVE-2022-44713	Modificada	Alta (7.5)	1.5%	—	Microsoft Office Microsoft Office Long Term Servicing Channel	13/12/2022	17/6/2026	Microsoft Outlook for Mac Spoofing Vulnerability
CVE-2022-44696	Modificada	Alta (7.8)	0.84%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	13/12/2022	17/6/2026	Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-44695	Modificada	Alta (7.8)	0.84%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Visio	13/12/2022	17/6/2026	Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-44694	Modificada	Alta (7.8)	0.75%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	13/12/2022	17/6/2026	Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-44692	Modificada	Alta (7.8)	0.81%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	13/12/2022	17/6/2026	Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-44691	Modificada	Alta (7.8)	0.92%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	13/12/2022	17/6/2026	Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2022-41107	Modificada	Alta (7.8)	0.86%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	9/11/2022	10/8/2026	Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-41106	Modificada	Alta (8.8)	2.4%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+2	9/11/2022	10/8/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41105	Modificada	Media (5.5)	0.79%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel	9/11/2022	10/8/2026	Microsoft Excel Information Disclosure Vulnerability
CVE-2022-41104	Modificada	Media (5.5)	0.79%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel	9/11/2022	10/8/2026	Microsoft Excel Security Feature Bypass Vulnerability
CVE-2022-41103	Modificada	Media (5.5)	0.92%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+4	9/11/2022	10/8/2026	Microsoft Word Information Disclosure Vulnerability
CVE-2022-41063	Modificada	Alta (7.8)	0.82%	—	Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Office Long Term Servicing Channel+2	9/11/2022	10/8/2026	Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41061	Modificada	Alta (7.8)	1.2%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+4	9/11/2022	10/8/2026	Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41060	Modificada	Media (5.5)	0.79%	—	Microsoft 365 Apps Microsoft Office Microsoft Office Long Term Servicing Channel Microsoft Office Online Server+4	9/11/2022	10/8/2026	Microsoft Word Information Disclosure Vulnerability