Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
30 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Baja (3.7) | 0.40% | — | Quicoto Thumbs Rating | 19/12/2023 | 17/6/2026 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0. | |
| Modificada | Media (5.4) | 0.48% | — | Discourse Discotoc | 6/10/2022 | 17/6/2026 | DiscoTOC is a Discourse theme component that generates a table of contents for topics. Users that can create topics in TOC-enabled categories (and have sufficient trust level - configured in component's settings) are able to inject arbitrary HTML on that topic's page. The issue has been fixed on the `main` branch.… | |
| Modificada | Media (4.8) | 0.48% | — | Cotonti Siena | 5/9/2022 | 17/6/2026 | Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM). | |
| Modificada | Media (4.8) | 0.48% | — | Cotonti Siena | 5/9/2022 | 17/6/2026 | Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post. | |
| Modificada | Alta (7.5) | 2.6% | 💥 Exploit | Cotonti Siena | 9/8/2013 | 16/6/2026 | SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via the "c" parameter to index.php. |