Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2884▼ 177 respecto a la semana anterior
Críticas / altas1281▼ 56 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior
29 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.73% | — | Jenkins YET Another Build Visualizer | 12/8/2020 | 17/6/2026 | Jenkins Yet Another Build Visualizer Plugin 1.11 and earlier does not escape tooltip content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Run/Update permission. | |
| Modificada | Media (6.1) | 3.3% | — | Themeisle Visualizer | 3/10/2019 | 17/6/2026 | A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard. This occurs because classes/Visualizer/Gutenberg/Block.php registers… | |
| Modificada | Crítica (10) | 39% | — | Themeisle Visualizer | 30/9/2019 | 17/6/2026 | A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data. | |
| Modificada | Alta (7.5) | 1.4% | — | Netscout Ngenius InfinistreamNetscout Visualizer | 10/4/2009 | 16/6/2026 | NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request. |