Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2732▼ 549 respecto a la semana anterior

Críticas / altas1295▼ 233 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior

32 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-20744	Modificada	Media (5.9)	0.72%	—	GO Cors Project GO Cors	28/1/2019	17/6/2026	The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.
CVE-2018-12441	Modificada	Alta (7.8)	0.56%	—	Corsair Utility Engine	11/10/2018	17/6/2026	The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unprivileged local users to execute arbitrary commands via modification of the CorsairService BINARY_PATH_NAME, leading to complete control of the affected system. The issue exists due to the Windows…
CVE-2017-11173	Modificada	Alta (8.8)	2.3%	—	Rack-cors Project Rack-cors Debian Linux	13/7/2017	17/6/2026	Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net (as well as…
CVE-2017-0256	Modificada	Media (5.3)	3.5%	—	Microsoft Asp.net Model View Controller Microsoft.aspnetcore.mvc.abstractions Microsoft.aspnetcore.mvc.apiexplorer Microsoft.aspnetcore.mvc.cors+14	12/5/2017	17/6/2026	A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
CVE-2017-0249	Modificada	Alta (7.3)	4.2%	—	Microsoft Asp.net Model View Controller Microsoft.aspnetcore.mvc.abstractions Microsoft.aspnetcore.mvc.apiexplorer Microsoft.aspnetcore.mvc.cors+14	12/5/2017	17/6/2026	An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
CVE-2017-0247	Modificada	Alta (7.5)	17%	—	Microsoft Asp.net Model View Controller Microsoft.aspnetcore.mvc.abstractions Microsoft.aspnetcore.mvc.apiexplorer Microsoft.aspnetcore.mvc.cors+14	12/5/2017	17/6/2026	A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc before 1.0.4 and 1.1.x before 1.1.3…
CVE-2006-3917	Modificada	Alta (7.5)	2.5%	💥 Exploit	R. Corson PHP Forge	28/7/2006	16/6/2026	PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfg_racine parameter.