Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2674▼ 561 respecto a la semana anterior

Críticas / altas1270▼ 252 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)217▼ 222 respecto a la semana anterior

1358 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-31747	Modificada	Alta (7.8)	1.1%	💥 Exploit	Wondershare Filmora	23/5/2023	9/7/2026	Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges.
CVE-2023-23688	Modificada	Media (5.4)	0.38%	—	Sumo Social Share Boost	15/5/2023	17/6/2026	Vulnerabilidad de Cross-Site Scripting (XSS) Autenticada Almacenada (admin+) en el plugin Sumo Social Share Boost en la versión 4.4 o anteriores.
CVE-2023-24955	Analizada	Alta (7.2)	85%	⚠ Explotación activa💥 Exploit	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	9/5/2023	17/6/2026	Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-24954	Modificada	Media (6.5)	1.8%	—	Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 20h2+10	9/5/2023	17/6/2026	Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2023-24950	Modificada	Media (6.5)	67%	—	Microsoft Sharepoint Enterprise Server Microsoft Sharepoint Server	9/5/2023	17/6/2026	Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-25783	Modificada	Media (4.8)	0.37%	—	Firecask Like & Share Button Project Firecask Like & Share Button	3/5/2023	17/6/2026	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alex Moss FireCask Like & Share Button plugin <= 1.1.5 versions.
CVE-2023-29835	Modificada	Alta (7.8)	0.38%	—	Wondershare Dr.fone	26/4/2023	17/6/2026	Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function.
CVE-2023-24005	Modificada	Media (4.8)	0.37%	—	Winwar Inline Tweet Sharer	25/4/2023	17/6/2026	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin plugin <= 2.5.3 versions.
CVE-2022-41612	Modificada	Media (4.8)	0.39%	—	Shareaholic Similar Posts	24/4/2023	17/6/2026	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shareaholic Similar Posts plugin <= 3.1.6 versions.
CVE-2023-28288	Modificada	Alta (8.1)	6.2%	💥 Exploit	Microsoft Sharepoint Foundation Microsoft Sharepoint Server	11/4/2023	17/6/2026	Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-27771	Modificada	Alta (7.8)	0.43%	—	Wondershare Creative Centerr	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCC_setup_full10819.exe file.
CVE-2023-27770	Modificada	Alta (7.8)	0.45%	—	Wondershare Edraw-max	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to execute arbitrary commands via the edraw-max_setup_full5371.exe file.
CVE-2023-27769	Modificada	Alta (7.8)	0.43%	—	Wondershare PDF Reader	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to execute arbitrary commands via the pdfreader_setup_full13143.exe file.
CVE-2023-27768	Modificada	Alta (7.8)	0.43%	—	Wondershare Pdfelement	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co.,Ltd PDFelement v9.1.1 allows a remote attacker to execute arbitrary commands via the pdfelement-pro_setup_full5239.exe file.
CVE-2023-27767	Modificada	Alta (7.8)	0.43%	—	Wondershare Dr.fone	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfone_setup_full3360.exe file.
CVE-2023-27766	Modificada	Alta (7.8)	0.43%	—	Wondershare Anireel	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co.,Ltd Anireel 1.5.4 allows a remote attacker to execute arbitrary commands via the anireel_setup_full9589.exe file.
CVE-2023-27765	Modificada	Alta (7.8)	0.43%	—	Wondershare Recoverit	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co.,Ltd Recoverit v.10.6.3 allows a remote attacker to execute arbitrary commands via the recoverit_setup_full4134.exe file.
CVE-2023-27764	Modificada	Alta (7.8)	0.43%	—	Wondershare Repairit	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to execute arbitrary commands via the repairit_setup_full5913.exe file.
CVE-2023-27763	Modificada	Alta (7.8)	0.43%	—	Wondershare Mobiletrans	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to execute arbitrary commands via the mobiletrans_setup_full5793.exe file.
CVE-2023-27762	Modificada	Alta (7.8)	0.43%	—	Wondershare Democreator	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co., Ltd DemoCreator v.6.0.0 allows a remote attacker to execute arbitrary commands via the democreator_setup_full7743.exe file.
CVE-2023-27761	Modificada	Alta (7.8)	0.43%	—	Wondershare Uniconverter	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co., Ltd UniConverter v.14.0.0 allows a remote attacker to execute arbitrary commands via the uniconverter14_64bit_setup_full14204.exe file.
CVE-2023-27760	Modificada	Alta (7.8)	0.43%	—	Wondershare Filmora	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to execute arbitrary commands via the filmora_setup_full846.exe.
CVE-2023-27759	Modificada	Alta (7.8)	0.39%	—	Wondershare Edrawmind	4/4/2023	17/6/2026	An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to executea arbitrary commands via the WindowsCodescs.dll file.
CVE-2023-21462	Modificada	Baja (3.3)	0.16%	—	Samsung Quick Share	16/3/2023	17/6/2026	The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.
CVE-2023-23395	Modificada	Baja (3.1)	0.60%	—	Microsoft Sharepoint Foundation Microsoft Sharepoint Server	14/3/2023	17/6/2026	Microsoft SharePoint Server Spoofing Vulnerability