Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
–

32 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaCrítica (9.8)1.3%—Mattermost Desktop19/6/202017/6/2026
An issue was discovered in Mattermost Desktop App before 3.4.0. Strings could be executed as code via injection.
ModificadaMedia (5.3)0.77%—Mattermost Desktop19/6/202017/6/2026
An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler (e.g., video, audio, and notifications).
ModificadaAlta (8.8)1.7%—Mattermost Desktop19/6/202017/6/2026
An issue was discovered in Mattermost Desktop App before 4.2.2. It allows attackers to execute arbitrary code via a crafted link.
ModificadaCrítica (9.8)1.4%—Mattermost Desktop19/6/202017/6/2026
An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection.
ModificadaAlta (7.3)0.43%—Mattermost Desktop19/6/202017/6/2026
An issue was discovered in Mattermost Desktop App before 4.4.0. The Same Origin Policy is mishandled during access-control decisions for web APIs, aka MMSA-2020-0006.
ModificadaMedia (6.5)1.2%—Mattermost Desktop19/6/202017/6/2026
An issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic Authentication is mishandled, allowing phishing, aka MMSA-2020-0007.
ModificadaMedia (6.1)0.75%—Mattermost Desktop19/6/202017/6/2026
An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application because server redirection is mishandled, aka MMSA-2020-0008.
Orbitaley — Vulnerabilidades