Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

31 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-45062	Modificada	Crítica (9.8)	1.5%	—	Xfce4-settings Debian Linux Fedoraproject Fedora	9/11/2022	17/6/2026	In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.
CVE-2020-5674	Modificada	Alta (7.8)	0.34%	—	Epson Album Print Epson Color Calibration Utility Epson Colorbase Epson Colorio Easy Print+29	24/11/2020	17/6/2026	Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2019-10303	Modificada	Alta (8.8)	1.3%	—	Jenkins Azure Publishersettings Credentials	18/4/2019	17/6/2026	Jenkins Azure PublisherSettings Credentials Plugin 1.2 and earlier stored credentials unencrypted in the credentials.xml file on the Jenkins master where they could be viewed by users with access to the master file system.
CVE-2017-3743	Modificada	Alta (7.5)	0.73%	—	Lenovo Advanced Settings Utility Lenovo Toolscenter Dynamic System Analysis Lenovo Updatexpress System Pack Installer	20/6/2017	17/6/2026	If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility (ASU), UpdateXpress System Pack Installer (UXSPI) or Dynamic System Analysis (DSA) to a second machine, the other users may be able to see the user ID and clear text…
CVE-2012-5560	Modificada	Baja (2.1)	0.37%	—	Mate-desktop Mate-settings-daemon	30/5/2014	16/6/2026	The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call.
CVE-2012-3329	Modificada	Baja (3.3)	0.34%	—	IBM Advanced Settings Utility IBM Bootable Media Creator	19/12/2012	16/6/2026	IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file.