Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2847▼ 221 respecto a la semana anterior
Críticas / altas1332▼ 166 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)214▼ 107 respecto a la semana anterior
1904 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Baja (3.7) | 1.3% | — | Oracle GraalvmOracle Graalvm FOR JDKOracle JDKOracle JRE+6 | 18/7/2023 | 17/6/2026 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM… | |
| Modificada | Media (5.1) | 0.48% | — | Oracle GraalvmOracle Graalvm FOR JDKOracle JDKOracle JRE+6 | 18/7/2023 | 17/6/2026 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for… | |
| Modificada | Baja (3.7) | 1.3% | — | Oracle GraalvmOracle Graalvm FOR JDKOracle JDKOracle JRE+6 | 18/7/2023 | 17/6/2026 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility). Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and… | |
| Modificada | Baja (3.1) | 0.95% | — | Oracle GraalvmOracle Graalvm FOR JDKOracle JDKOracle JRE+6 | 18/7/2023 | 17/6/2026 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7… | |
| Modificada | Media (4.3) | 0.30% | — | Citrix Virtual Apps AND DesktopsCitrix Linux Virtual Delivery Agent | 10/7/2023 | 17/6/2026 | Users with only access to launch VDA applications can launch an unauthorized desktop | |
| Modificada | Alta (7.2) | 0.80% | — | Glpi-project Glpi Agent | 23/6/2023 | 17/6/2026 | The GLPI Agent is a generic management agent. Prior to version 1.5, if glpi-agent is running remoteinventory task against an Unix platform with ssh command, an administrator user on the remote can manage to inject a command in a specific workflow the agent would run with the privileges it uses. In the case, the agent… | |
| Modificada | Alta (7.2) | 1.4% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does… | |
| Modificada | Media (4.3) | 0.65% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to modify a minor functionality of another user's data.… | |
| Modificada | Media (4.3) | 0.65% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this issue… | |
| Modificada | Media (4.3) | 0.74% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Business Logic Errors vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this issue… | |
| Modificada | Baja (2.7) | 1.0% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An admin privileged attacker could leverage this vulnerability to impact the availability of a user's minor feature.… | |
| Modificada | Media (4.9) | 0.95% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker can force the application to make arbitrary requests via injection… | |
| Modificada | Media (4.9) | 1.1% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker can force the application to make arbitrary requests via injection… | |
| Modificada | Media (5.3) | 0.63% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this issue does not… | |
| Modificada | Media (6.5) | 0.88% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an XML Injection vulnerability. An attacker with low privileges can trigger a specially crafted script to a security feature bypass. Exploitation of this issue does not require user interaction. | |
| Modificada | Media (4.3) | 0.65% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A privileged attacker could leverage this vulnerability to modify a minor functionality of another user's data.… | |
| Modificada | Media (5.3) | 0.71% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Information Exposure vulnerability that could lead to a security feature bypass. An attacker could leverage this vulnerability to leak minor user data. Exploitation of this issue does not require user… | |
| Modificada | Alta (7.5) | 1.0% | — | Adobe CommerceAdobe Magento | 15/6/2023 | 17/6/2026 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to leak another user's data. Exploitation of this issue does not require… | |
| Modificada | Alta (8.1) | 0.57% | — | Trellix Agent | 7/6/2023 | 17/6/2026 | A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting in the service becoming unavailable. | |
| Modificada | Alta (7.8) | 0.65% | — | Trellix Agent | 7/6/2023 | 17/6/2026 | A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature located in the System Tree. | |
| Modificada | Crítica (9.8) | 1.0% | — | BMC Patrol Agent | 31/5/2023 | 17/6/2026 | An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified (and, by default, authentication is not required). Some configuration fields related to SNMP (e.g., masterAgentName or masterAgentStartLine) result in code execution when the agent is restarted. NOTE: the vendor's… | |
| Modificada | Media (5.4) | 3.1% | 💥 Exploit | Broadcom Symantec Siteminder Webagent | 30/5/2023 | 17/6/2026 | A user can supply malicious HTML and JavaScript code that will be executed in the client browser | |
| Modificada | Alta (8.1) | 0.36% | — | Cloudfoundry Capi-releaseCloudfoundry Cf-deploymentCloudfoundry Loggregator-agent | 19/5/2023 | 17/6/2026 | Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override other users syslog drain credentials if they're aware of the client certificate used for that syslog drain. This applies even if the drain has zero certs. This would allow the user to override the… | |
| Modificada | Alta (7.5) | 0.31% | — | Acronis AgentAcronis Cyber Protect | 18/5/2023 | 17/6/2026 | Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984. | |
| Modificada | Alta (7.5) | 0.35% | — | Acronis AgentAcronis Cyber Protect | 18/5/2023 | 17/6/2026 | Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984. |