Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2739▼ 332 respecto a la semana anterior
Críticas / altas1275▼ 217 respecto a la semana anterior
Nueva explotación activa (KEV)8→ sin cambios respecto a la semana anterior
Sin puntuar (sin CVSS)213▼ 109 respecto a la semana anterior
2493 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 0.80% | — | UI Edgemax Edgerouter FirmwareUI Aircube Firmware | 18/7/2023 | 17/6/2026 | A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices. | |
| Modificada | Media (6.3) | 0.56% | — | Microsoft Edge Chromium | 14/7/2023 | 17/6/2026 | Microsoft Edge for Android (Chromium-based) Tampering Vulnerability | |
| Modificada | Alta (7.8) | 1.4% | — | Microsoft Edge Chromium | 14/7/2023 | 17/6/2026 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | |
| Modificada | Media (4.3) | 0.63% | — | Microsoft Edge | 14/7/2023 | 17/6/2026 | Microsoft Edge for iOS Spoofing Vulnerability | |
| Modificada | Crítica (9.8) | 0.56% | — | Johnsoncontrols Istar Ultra FirmwareJohnsoncontrols Istar Ultra LT FirmwareJohnsoncontrols Istar Ultra G2 FirmwareJohnsoncontrols Edge G2 Firmware | 11/7/2023 | 17/6/2026 | An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights. | |
| Modificada | Alta (7.8) | 0.50% | — | IBM Watson Knowledge Catalog ON Cloud PAK FOR Data | 10/7/2023 | 17/6/2026 | IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 251782. | |
| Modificada | Media (6.5) | 0.98% | — | IBM Watson Knowledge Catalog ON Cloud PAK FOR Data | 10/7/2023 | 17/6/2026 | IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 could allow an authenticated user send a specially crafted request that could cause a denial of service. IBM X-Force ID: 251704. | |
| Modificada | Alta (7.5) | 0.63% | — | Vmware Sd-wan Edge Firmware | 6/7/2023 | 17/6/2026 | VMware SD-WAN (Edge) contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagnostic bundle of the application under VMware SD-WAN Management. | |
| Modificada | Media (4.3) | 1.0% | — | Microsoft Edge Chromium | 1/7/2023 | 17/6/2026 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | |
| Modificada | Media (6.1) | 2.2% | — | Microsoft Edge Chromium | 1/7/2023 | 17/6/2026 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | |
| Modificada | Media (5.4) | 0.57% | — | Microsoft Edge Chromium | 1/7/2023 | 17/6/2026 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | |
| Modificada | Alta (8.8) | 1.3% | — | Microsoft Edge Chromium | 1/7/2023 | 17/6/2026 | Microsoft Edge (basado en Chromium) contiene una vulnerabilidad en la función de seguridad que podría permitir su omisión | |
| Modificada | Media (4.7) | 0.68% | — | Microsoft Edge Chromium | 29/6/2023 | 17/6/2026 | Se ha encontrado una vulnerabilidad de suplantación de identidad en Microsoft Edge (basado en Chromium). | |
| Modificada | Alta (8.8) | 0.72% | — | Microsoft Edge Chromium | 29/6/2023 | 17/6/2026 | Se ha detectado una vulnerabilidad de elevación de privilegios en Microsoft Edge (basado en Chromium). | |
| Modificada | Baja (3.1) | 0.61% | — | Microsoft Edge Chromium | 29/6/2023 | 17/6/2026 | Se ha detectado una vulnerabilidad de suplantación de identidad en Microsoft Edge (basado en Chromium). | |
| Modificada | Alta (8.3) | 1.0% | — | Microsoft Edge Chromium | 29/6/2023 | 17/6/2026 | Se ha detectado una vulnerabilidad de elevación de privilegios en Microsoft Edge (basado en Chromium). | |
| Modificada | Alta (7.5) | 1.00% | — | Microsoft Edge Chromium | 29/6/2023 | 17/6/2026 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | |
| Modificada | Alta (8.2) | 0.85% | — | Microsoft Edge Chromium | 28/6/2023 | 17/6/2026 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | |
| Modificada | Alta (8.8) | 1.1% | — | Progress OpenedgeProgress Openedge ExplorerProgress Openedge Management | 23/6/2023 | 17/6/2026 | In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM or OEE role) could perform a URL injection attack to change identity or role membership, e.g., escalate to admin. This affects OpenEdge LTS before 11.7.16, 12.x before 12.2.12, and 12.3.x through… | |
| Modificada | Media (6.5) | 8.6% | 💥 Exploit | Microsoft Edge Chromium | 14/6/2023 | 17/6/2026 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | |
| Modificada | Media (6.1) | 1.2% | — | Microsoft Edge Chromium | 7/6/2023 | 17/6/2026 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | |
| Modificada | Alta (7.5) | 1.5% | — | Microsoft Edge Chromium | 3/6/2023 | 17/6/2026 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | |
| Modificada | Alta (7.8) | 0.18% | — | Dell Poweredge R740 FirmwareDell Poweredge R740xd FirmwareDell Poweredge R640 FirmwareDell Poweredge R940 Firmware+26 | 22/5/2023 | 17/6/2026 | Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading… | |
| Modificada | Media (5.4) | 0.76% | — | Hledger | 21/5/2023 | 17/6/2026 | An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting (XSS) vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the atob function. | |
| Modificada | Media (4.3) | 0.58% | — | Arubanetworks Edgeconnect Enterprise | 16/5/2023 | 17/6/2026 | A vulnerability exists in the Aruba EdgeConnect Enterprise web management interface that allows remote authenticated users to issue arbitrary URL requests from the Aruba EdgeConnect Enterprise instance. The impact of this vulnerability is limited to a subset of URLs which can result in the possible disclosure of data… |