Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior
Críticas / altas1367▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior
69 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 0.14% | — | HP Zcentral 4R Workstation FirmwareHP Z1 All-in-one G3 Workstation FirmwareHP Elitebook 725 G4 FirmwareHP Elitebook 745 G4 Firmware+383 | 12/6/2023 | 17/6/2026 | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. | |
| Modificada | Alta (7.8) | 0.14% | — | HP Zcentral 4R Workstation FirmwareHP Z1 All-in-one G3 Workstation FirmwareHP Elitebook 725 G4 FirmwareHP Elitebook 745 G4 Firmware+383 | 12/6/2023 | 17/6/2026 | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. | |
| Modificada | Alta (7.8) | 0.14% | — | HP Zcentral 4R Workstation FirmwareHP Z1 All-in-one G3 Workstation FirmwareHP Elitebook 725 G4 FirmwareHP Elitebook 745 G4 Firmware+383 | 12/6/2023 | 17/6/2026 | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. | |
| Modificada | Media (5.5) | 0.18% | — | HP Elite Dragonfly G3 FirmwareHP Dragonfly Folio G3 FirmwareHP Elite Dragonfly G2 FirmwareHP Elite Dragonfly MAX Firmware+87 | 28/4/2023 | 17/6/2026 | A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability. | |
| Modificada | Crítica (9.8) | 0.44% | — | Firefly-iii Firefly III | 5/4/2023 | 17/6/2026 | Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6. | |
| Modificada | Crítica (9.8) | 0.34% | — | Firefly-iii Firefly III | 1/4/2023 | 17/6/2026 | Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0. | |
| Modificada | Alta (7) | 0.14% | — | HP Dragonfly Folio G3 2-in-1 FirmwareHP Elite Dragonfly FirmwareHP Elite Dragonfly G3 FirmwareHP Elite Dragonfly G2 Firmware+313 | 1/2/2023 | 17/6/2026 | A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. | |
| Modificada | Alta (7.8) | 0.31% | — | HP Dragonfly Folio G3 2-in-1 FirmwareHP Elite Dragonfly FirmwareHP Elite Dragonfly G3 FirmwareHP Elite Dragonfly G2 Firmware+323 | 1/2/2023 | 17/6/2026 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities. | |
| Modificada | Alta (7.8) | 0.17% | — | HP 340 G3 FirmwareHP 340 G4 FirmwareHP 346 G3 FirmwareHP 346 G4 Firmware+373 | 1/2/2023 | 17/6/2026 | HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities. | |
| Modificada | Media (6.5) | 0.63% | — | Firefly-iii Firefly III | 14/1/2023 | 17/6/2026 | Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0. | |
| Modificada | Alta (8.8) | 0.44% | — | HP Z1 Entry Tower G5 Workstation FirmwareHP Z1 Entry Tower G6 Workstation FirmwareHP Z1 G8 Tower Desktop PC FirmwareHP Z4 G4 Workstation (core-x) Firmware+183 | 16/2/2022 | 17/6/2026 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution. | |
| Modificada | Alta (8.8) | 0.42% | — | HP Z1 Entry Tower G5 Workstation FirmwareHP Z1 Entry Tower G6 Workstation FirmwareHP Z1 G8 Tower Desktop PC FirmwareHP Z4 G4 Workstation (core-x) Firmware+183 | 16/2/2022 | 17/6/2026 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution. | |
| Modificada | Alta (8.8) | 0.42% | — | HP Elite Dragonfly FirmwareHP Elite Dragonfly G2 FirmwareHP Elite Dragonfly MAX FirmwareHP Elite X2 1013 G3 Firmware+183 | 16/2/2022 | 17/6/2026 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution. | |
| Modificada | Alta (8.8) | 0.45% | — | HP Z1 Entry Tower G5 Workstation FirmwareHP Z1 Entry Tower G6 Workstation FirmwareHP Z1 G8 Tower Desktop PC FirmwareHP Z4 G4 Workstation (core-x) Firmware+183 | 16/2/2022 | 17/6/2026 | A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware. | |
| Modificada | Alta (8.8) | 0.44% | — | HP 260 G3 Desktop Mini PC FirmwareHP Elitedesk 800 35W G4 Desktop Mini PC FirmwareHP Elitedesk 800 65W G4 Desktop Mini PC FirmwareHP Elitedesk 800 95W G4 Desktop Mini PC Firmware+183 | 16/2/2022 | 17/6/2026 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution. | |
| Modificada | Media (4.3) | 0.44% | — | Firefly-iii Firefly III | 4/12/2021 | 17/6/2026 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | |
| Modificada | Media (4.3) | 0.44% | — | Firefly-iii Firefly III | 1/12/2021 | 17/6/2026 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | |
| Modificada | Media (4.3) | 0.44% | — | Firefly-iii Firefly III | 13/11/2021 | 17/6/2026 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | |
| Modificada | Alta (8.8) | 0.55% | — | Firefly-iii Firefly III | 27/10/2021 | 17/6/2026 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | |
| Modificada | Media (6.5) | 0.55% | — | Firefly-iii Firefly III | 27/10/2021 | 17/6/2026 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | |
| Modificada | Media (5.4) | 0.57% | — | Firefly-iii Firefly III | 19/10/2021 | 17/6/2026 | firefly-iii is vulnerable to URL Redirection to Untrusted Site | |
| Modificada | Alta (8.8) | 0.78% | — | Firefly-iii Firefly III | 19/10/2021 | 17/6/2026 | firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type | |
| Modificada | Alta (8.8) | 0.54% | — | Firefly-iii Firefly III | 27/9/2021 | 17/6/2026 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | |
| Modificada | Media (6.5) | 0.47% | — | Firefly-iii Firefly III | 23/8/2021 | 17/6/2026 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | |
| Modificada | Media (4.3) | 0.40% | — | Firefly-iii Firefly III | 23/8/2021 | 17/6/2026 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) |