Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2965▲ 27 respecto a la semana anterior

Críticas / altas1456▲ 193 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior

110 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-4644	Modificada	Media (6.1)	0.62%	—	Ikus-soft Rdiffweb	22/12/2022	17/6/2026	Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
CVE-2022-4314	Modificada	Crítica (9.8)	0.82%	—	Ikus-soft Rdiffweb	12/12/2022	17/6/2026	Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.
CVE-2022-4018	Modificada	Media (4.3)	0.87%	—	Ikus-soft Rdiffweb	16/11/2022	17/6/2026	Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
CVE-2022-40735	Modificada	Alta (7.5)	2.5%	—	Diffie-hellman KEY Exchange Project Diffie-hellman KEY Exchange	14/11/2022	17/6/2026	The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "(appropriately) short exponents" can be used when there are adequate subgroup constraints, and these short exponents can…
CVE-2022-3362	Modificada	Crítica (9.8)	0.94%	—	Ikus-soft Rdiffweb	14/11/2022	17/6/2026	Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVE-2022-41713	Modificada	Media (5.3)	0.67%	—	Deep-object-diff Project Deep-object-diff	3/11/2022	17/6/2026	deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the '__proto__' property to be edited.
CVE-2022-3363	Modificada	Crítica (9.8)	0.84%	—	Ikus-soft Rdiffweb	26/10/2022	17/6/2026	Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.
CVE-2022-3327	Modificada	Crítica (9.8)	0.84%	—	Ikus-soft Rdiffweb	20/10/2022	17/6/2026	Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
CVE-2022-3439	Modificada	Crítica (9.8)	0.68%	—	Ikus-soft Rdiffweb	14/10/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVE-2022-3457	Modificada	Crítica (9.8)	0.36%	—	Ikus-soft Rdiffweb	13/10/2022	17/6/2026	Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.
CVE-2022-3456	Modificada	Crítica (9.8)	0.37%	—	Ikus-soft Rdiffweb	13/10/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVE-2022-3438	Modificada	Media (6.1)	0.55%	—	Ikus-soft Rdiffweb	10/10/2022	17/6/2026	Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVE-2022-3389	Modificada	Alta (7.5)	1.4%	—	Ikus-soft Rdiffweb	6/10/2022	17/6/2026	Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.
CVE-2022-3376	Modificada	Media (5.3)	0.85%	—	Ikus-soft Rdiffweb	6/10/2022	17/6/2026	Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVE-2022-3273	Modificada	Crítica (9.8)	0.55%	—	Ikus-soft Rdiffweb	6/10/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVE-2022-3371	Modificada	Alta (7.5)	1.3%	—	Ikus-soft Rdiffweb	30/9/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
CVE-2022-3364	Modificada	Alta (7.5)	1.2%	—	Ikus-soft Rdiffweb	29/9/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
CVE-2022-3326	Modificada	Media (4.3)	0.69%	—	Ikus-soft Rdiffweb	29/9/2022	17/6/2026	Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.
CVE-2022-3292	Modificada	Media (4.6)	0.57%	—	Ikus-soft Rdiffweb	28/9/2022	17/6/2026	Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3298	Modificada	Alta (7.5)	1.1%	—	Ikus-soft Rdiffweb	26/9/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3290	Modificada	Alta (7.5)	0.87%	—	Ikus-soft Rdiffweb	26/9/2022	17/6/2026	Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3272	Modificada	Alta (7.5)	1.8%	—	Ikus-soft Rdiffweb	26/9/2022	17/6/2026	Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3295	Modificada	Alta (7.5)	1.1%	—	Ikus-soft Rdiffweb	26/9/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3301	Modificada	Baja (2.4)	0.68%	—	Ikus-soft Rdiffweb	26/9/2022	17/6/2026	Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3269	Modificada	Crítica (9.8)	0.89%	—	Ikus-soft Rdiffweb	23/9/2022	17/6/2026	Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.