Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3020▼ 63 respecto a la semana anterior

Críticas / altas1413▲ 57 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

47 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-3326	Modificada	Media (4.3)	0.69%	—	Ikus-soft Rdiffweb	29/9/2022	17/6/2026	Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.
CVE-2022-3292	Modificada	Media (4.6)	0.57%	—	Ikus-soft Rdiffweb	28/9/2022	17/6/2026	Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3298	Modificada	Alta (7.5)	1.1%	—	Ikus-soft Rdiffweb	26/9/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3290	Modificada	Alta (7.5)	0.87%	—	Ikus-soft Rdiffweb	26/9/2022	17/6/2026	Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3272	Modificada	Alta (7.5)	1.8%	—	Ikus-soft Rdiffweb	26/9/2022	17/6/2026	Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3295	Modificada	Alta (7.5)	1.1%	—	Ikus-soft Rdiffweb	26/9/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3301	Modificada	Baja (2.4)	0.68%	—	Ikus-soft Rdiffweb	26/9/2022	17/6/2026	Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3269	Modificada	Crítica (9.8)	0.89%	—	Ikus-soft Rdiffweb	23/9/2022	17/6/2026	Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.
CVE-2022-3274	Modificada	Baja (3.5)	0.50%	—	Ikus-soft Rdiffweb	22/9/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.
CVE-2022-3267	Modificada	Media (4.3)	0.39%	—	Ikus-soft Rdiffweb	22/9/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVE-2022-3233	Modificada	Media (4.3)	0.39%	—	Ikus-soft Rdiffweb	21/9/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVE-2022-3250	Modificada	Media (5.3)	0.55%	—	Ikus-soft Rdiffweb	21/9/2022	17/6/2026	Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVE-2022-3232	Modificada	Media (4.3)	0.40%	—	Ikus-soft Rdiffweb	17/9/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5.
CVE-2022-3221	Modificada	Alta (8.8)	0.76%	—	Ikus-soft Rdiffweb	15/9/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.
CVE-2022-3179	Modificada	Alta (8.8)	0.98%	—	Ikus-soft Rdiffweb	13/9/2022	17/6/2026	Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.
CVE-2022-3175	Modificada	Media (5.3)	0.87%	—	Ikus-soft Rdiffweb	13/9/2022	17/6/2026	Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.
CVE-2022-3174	Modificada	Alta (7.5)	0.71%	—	Ikus-soft Rdiffweb	13/9/2022	17/6/2026	Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.
CVE-2022-3167	Modificada	Alta (8.8)	1.2%	—	Ikus-soft Rdiffweb	8/9/2022	17/6/2026	Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.
CVE-2021-45694	Modificada	Alta (7.5)	1.1%	—	Rdiff Project Rdiff	27/12/2021	17/6/2026	An issue was discovered in the rdiff crate through 2021-02-03 for Rust. Window may read from uninitialized memory locations.
CVE-2015-0858	Modificada	Baja (3.3)	0.37%	—	Debian Linux Tardiff Project Tardiff	6/5/2016	17/6/2026	Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory.
CVE-2015-0857	Modificada	Crítica (9.8)	5.4%	—	Tardiff Project Tardiff Debian Linux	6/5/2016	17/6/2026	Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file.
CVE-2007-2747	Modificada	Media (5)	3.5%	—	Rdiffweb	17/5/2007	16/6/2026	Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to the /browse URI.