Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2677▼ 656 respecto a la semana anterior
Críticas / altas1264▼ 294 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
618 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 3.3% | — | Zoom MeetingsZoom Meetings FOR BlackberryZoom Meetings FOR IntuneZoom Meetings FOR Chrome OS+22 | 24/11/2021 | 17/6/2026 | A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client… | |
| Modificada | Media (6.5) | 3.3% | — | Microsoft Azure Active DirectoryMicrosoft Azure Active Site RecoveryMicrosoft Azure AutomationMicrosoft Azure Migrate | 24/11/2021 | 19/8/2026 | An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate keyCredential on an Azure AD Application or Service Principal (which is not recommended). This vulnerability allows a user or service in the tenant with… | |
| Modificada | Media (6.1) | 0.97% | — | Wpo365 Wordpress + Azure AD / Microsoft Office 365 | 19/11/2021 | 17/6/2026 | The “WPO365 | LOGIN” WordPress plugin (up to and including version 15.3) by wpo365.com is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order XSS). Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data without proper… | |
| Modificada | Baja (3.3) | 1.4% | — | Microsoft Azure Real Time Operating System | 10/11/2021 | 19/8/2026 | Azure RTOS Information Disclosure Vulnerability | |
| Modificada | Media (6.8) | 0.69% | — | Microsoft Azure Real Time Operating System | 10/11/2021 | 19/8/2026 | Azure RTOS Elevation of Privilege Vulnerability | |
| Modificada | Media (6.8) | 0.86% | — | Microsoft Azure Real Time Operating System | 10/11/2021 | 19/8/2026 | Azure RTOS Elevation of Privilege Vulnerability | |
| Modificada | Media (6.8) | 0.69% | — | Microsoft Azure Real Time Operating System | 10/11/2021 | 19/8/2026 | Azure RTOS Elevation of Privilege Vulnerability | |
| Modificada | Media (4.6) | 1.1% | — | Microsoft Azure Rtos | 10/11/2021 | 19/8/2026 | Azure RTOS Information Disclosure Vulnerability | |
| Modificada | Media (6.7) | 0.62% | — | Microsoft Azure Sphere | 10/11/2021 | 19/8/2026 | Azure Sphere Tampering Vulnerability | |
| Modificada | Media (4.4) | 0.91% | — | Microsoft Azure Sphere | 10/11/2021 | 19/8/2026 | Azure Sphere Information Disclosure Vulnerability | |
| Modificada | Media (4.4) | 0.90% | — | Microsoft Azure Sphere | 10/11/2021 | 19/8/2026 | Azure Sphere Information Disclosure Vulnerability | |
| Modificada | Media (5.5) | 0.73% | — | Microsoft Azure Sphere | 10/11/2021 | 19/8/2026 | Azure Sphere Information Disclosure Vulnerability | |
| Modificada | Media (5.5) | 1.6% | — | Microsoft Azure Real Time Operating System | 10/11/2021 | 19/8/2026 | Azure RTOS Information Disclosure Vulnerability | |
| Analizada | Alta (7.8) | 2.9% | ⚠ Explotación activa | Microsoft Azure Automation State ConfigurationMicrosoft Azure Automation Update ManagementMicrosoft Azure Diagnostics (lad)Microsoft Azure Open Management Infrastructure+7 | 15/9/2021 | 10/8/2026 | Open Management Infrastructure Elevation of Privilege Vulnerability | |
| Analizada | Alta (7.8) | 11% | ⚠ Explotación activa💥 Exploit | Microsoft Azure Automation State ConfigurationMicrosoft Azure Automation Update ManagementMicrosoft Azure Diagnostics (lad)Microsoft Azure Open Management Infrastructure+7 | 15/9/2021 | 10/8/2026 | Open Management Infrastructure Elevation of Privilege Vulnerability | |
| Analizada | Crítica (9.8) | 100% | ⚠ Explotación activa💥 Exploit | Microsoft Azure Automation State ConfigurationMicrosoft Azure Automation Update ManagementMicrosoft Azure Diagnostics (lad)Microsoft Azure Security Center+6 | 15/9/2021 | 10/8/2026 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | |
| Analizada | Alta (7.8) | 2.7% | ⚠ Explotación activa | Microsoft Azure Automation State ConfigurationMicrosoft Azure Automation Update ManagementMicrosoft Azure Diagnostics (lad)Microsoft Azure Security Center+6 | 15/9/2021 | 10/8/2026 | Open Management Infrastructure Elevation of Privilege Vulnerability | |
| Modificada | Media (4.4) | 0.89% | — | Microsoft Azure Sphere | 15/9/2021 | 10/8/2026 | Azure Sphere Information Disclosure Vulnerability | |
| Modificada | Alta (8.8) | 0.68% | — | Jenkins Azure AD | 31/8/2021 | 17/6/2026 | Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins. | |
| Modificada | Alta (7.1) | 1.4% | 💥 PoC | Microsoft Azure Active Directory ConnectMicrosoft Azure Active Directory Connect Provisioning Agent | 12/8/2021 | 10/8/2026 | Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability | |
| Modificada | Alta (7.8) | 0.83% | — | Microsoft Azure Cyclecloud | 12/8/2021 | 10/8/2026 | Azure CycleCloud Elevation of Privilege Vulnerability | |
| Modificada | Alta (7.8) | 0.59% | — | Microsoft Azure Cyclecloud | 12/8/2021 | 10/8/2026 | Azure CycleCloud Elevation of Privilege Vulnerability | |
| Modificada | Media (4.4) | 0.73% | — | Microsoft Azure Sphere | 12/8/2021 | 10/8/2026 | Azure Sphere Denial of Service Vulnerability | |
| Modificada | Alta (7.8) | 0.60% | — | Microsoft Azure Sphere | 12/8/2021 | 10/8/2026 | Azure Sphere Elevation of Privilege Vulnerability | |
| Modificada | Media (4.4) | 0.86% | — | Microsoft Azure Sphere | 12/8/2021 | 10/8/2026 | Azure Sphere Information Disclosure Vulnerability |