Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

59 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-2103	Modificada	Media (5.4)	0.47%	—	Easyappointments	15/4/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
CVE-2023-2102	Modificada	Media (4.8)	0.50%	—	Easyappointments	15/4/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
CVE-2023-1367	Modificada	Baja (3.8)	0.43%	—	Easyappointments	13/3/2023	17/6/2026	Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
CVE-2023-1269	Modificada	Crítica (9.8)	0.74%	—	Easyappointments	8/3/2023	17/6/2026	Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
CVE-2022-1397	Modificada	Alta (8.8)	1.2%	—	Easyappointments	10/5/2022	17/6/2026	API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover.
CVE-2022-0482	Modificada	Crítica (9.1)	44%	💥 Exploit	Easyappointments	9/3/2022	17/6/2026	Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3.
CVE-2018-13063	Modificada	Alta (7.5)	1.3%	—	Easyappointments Easy!appointments	16/3/2020	17/6/2026	Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts.
CVE-2018-13060	Modificada	Media (6.5)	0.92%	—	Easyappointments Easy!appointments	16/3/2020	17/6/2026	Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue.
CVE-2019-14936	Modificada	Media (5.3)	1.5%	—	Easyappointments Easy!appointments	11/9/2019	17/6/2026	Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure (Username and Password Hash).