Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3006▼ 69 respecto a la semana anterior

Críticas / altas1420▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

83 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-5036	Modificada	Alta (8.8)	0.32%	—	Usememos Memos	18/9/2023	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.
CVE-2023-4698	Modificada	Alta (7.5)	0.92%	—	Usememos Memos	1/9/2023	17/6/2026	Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2.
CVE-2023-4697	Modificada	Alta (8.8)	0.85%	—	Usememos Memos	1/9/2023	17/6/2026	Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2.
CVE-2023-4696	Modificada	Crítica (9.8)	1.1%	—	Usememos Memos	1/9/2023	17/6/2026	Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.
CVE-2022-25978	Modificada	Media (6.1)	0.53%	—	Usememos Memos	15/2/2023	17/6/2026	All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme.
CVE-2023-0112	Modificada	Media (5.4)	0.57%	—	Usememos Memos	7/1/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
CVE-2023-0111	Modificada	Media (5.4)	0.50%	—	Usememos Memos	7/1/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
CVE-2023-0110	Modificada	Media (5.4)	0.50%	—	Usememos Memos	7/1/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
CVE-2023-0108	Modificada	Media (5.4)	0.52%	—	Usememos Memos	7/1/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
CVE-2023-0107	Modificada	Media (5.4)	0.50%	—	Usememos Memos	7/1/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
CVE-2023-0106	Modificada	Media (5.4)	0.65%	—	Usememos Memos	7/1/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
CVE-2022-4866	Modificada	Crítica (9)	0.99%	—	Usememos Memos	31/12/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4865	Modificada	Crítica (9)	0.99%	—	Usememos Memos	31/12/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4863	Modificada	Media (6.5)	0.68%	—	Usememos Memos	30/12/2022	17/6/2026	Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4851	Modificada	Media (5.3)	0.77%	—	Usememos Memos	29/12/2022	17/6/2026	Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4850	Modificada	Media (6.5)	0.33%	—	Usememos Memos	29/12/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4849	Modificada	Media (6.5)	0.35%	—	Usememos Memos	29/12/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4848	Modificada	Media (5.7)	0.53%	—	Usememos Memos	29/12/2022	17/6/2026	Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4847	Modificada	Media (6.5)	0.64%	—	Usememos Memos	29/12/2022	17/6/2026	Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4846	Modificada	Media (6.5)	0.26%	—	Usememos Memos	29/12/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4845	Modificada	Media (4.3)	0.26%	—	Usememos Memos	29/12/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4844	Modificada	Alta (8.8)	0.31%	—	Usememos Memos	29/12/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4841	Modificada	Media (5.4)	0.60%	—	Usememos Memos	29/12/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4840	Modificada	Media (5.4)	0.65%	—	Usememos Memos	29/12/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4839	Modificada	Media (5.4)	0.77%	—	Usememos Memos	29/12/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.