Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
–

45 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (5.4)0.69%—Livehelperchat Live Helper Chat26/1/202217/6/2026
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
ModificadaMedia (6.6)1.1%—Livehelperchat Live Helper Chat19/1/202217/6/2026
Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.
ModificadaMedia (4.3)0.44%—Livehelperchat18/1/202217/6/2026
Cross-Site Request Forgery (CSRF) in GitHub repository livehelperchat/livehelperchat prior to 2.0.
ModificadaMedia (5.4)0.81%—Livehelperchat17/1/202217/6/2026
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
ModificadaMedia (4.3)0.43%—Livehelperchat Live Helper Chat14/1/202217/6/2026
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
ModificadaMedia (6.5)0.51%—Livehelperchat Live Helper Chat14/1/202217/6/2026
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
ModificadaMedia (5.3)0.90%—Livehelperchat Live Helper Chat4/1/202217/6/2026
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
ModificadaMedia (6.1)0.78%—Livehelperchat Live Helper Chat29/12/202117/6/2026
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
ModificadaMedia (5.4)0.53%—Livehelperchat Live Helper Chat29/12/202117/6/2026
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
ModificadaMedia (5.4)0.46%—Livehelperchat Live Helper Chat28/12/202117/6/2026
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
ModificadaMedia (5.3)0.92%—Livehelperchat Live Helper Chat28/12/202117/6/2026
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
ModificadaMedia (6.1)0.95%—Livehelperchat Live Helper Chat26/12/202117/6/2026
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
ModificadaAlta (8.8)0.54%—Livehelperchat Live Helper Chat18/12/202117/6/2026
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
ModificadaMedia (5.4)0.63%—Livehelperchat Live Helper Chat17/12/202117/6/2026
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
ModificadaMedia (6.5)0.49%—Livehelperchat Live Helper Chat16/12/202117/6/2026
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
ModificadaMedia (6.1)0.88%—Livehelperchat Live Helper Chat8/12/202117/6/2026
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
ModificadaMedia (6.5)0.44%—Livehelperchat Live Helper Chat7/12/202117/6/2026
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
ModificadaMedia (6.1)1.0%—Livehelperchat Live Helper Chat2/10/202017/6/2026
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.
ModificadaMedia (6.1)1.1%—Livehelperchat Live Helper Chat2/10/202017/6/2026
Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.
ModificadaMedia (6.1)1.1%—Livehelperchat Live Helper Chat17/7/201717/6/2026
Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users.
Orbitaley — Vulnerabilidades