Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

202 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-32869	Analizada	Media (5.3)	0.64%	—	Hono	23/4/2024	17/6/2026	Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.2.7, when using serveStatic with deno, it is possible to traverse the directory where `main.ts` is located. This can result in retrieval of unexpected files. Version 4.2.7 contains a patch for the issue.
CVE-2024-32652	Analizada	Alta (7.5)	0.88%	—	Hono Node-server	19/4/2024	17/6/2026	The adapter @hono/node-server allows you to run your Hono application on Node.js. Prior to 1.10.1, the application hangs when receiving a Host header with a value that `@hono/node-server` can't handle well. Invalid values are those that cannot be parsed by the `URL` as a hostname such as an empty string, slashes `/`,…
CVE-2024-23340	Modificada	Media (5.3)	0.72%	—	Hono Node-server	22/1/2024	17/6/2026	@hono/node-server is an adapter that allows users to run Hono applications on Node.js. Since v1.3.0, @hono/node-server has used its own Request object with `url` behavior that is unexpected. In the standard API, if the URL contains `..`, here called "double dots", the URL string returned by Request will be in the…
CVE-2023-6939	Modificada	Media (5.5)	0.16%	—	Hihonor Magic UI	29/12/2023	17/6/2026	Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.
CVE-2023-51435	Modificada	Alta (7.1)	0.16%	—	Hihonor Magic UI	29/12/2023	17/6/2026	Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
CVE-2023-51434	Modificada	Alta (7.8)	0.20%	—	Hihonor Magic UI	29/12/2023	17/6/2026	Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.
CVE-2023-51433	Modificada	Media (5.5)	0.13%	—	Hihonor Magic UI	29/12/2023	17/6/2026	Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
CVE-2023-51432	Modificada	Media (5.5)	0.17%	—	Hihonor Magic UI	29/12/2023	17/6/2026	Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.
CVE-2023-51431	Modificada	Media (5.5)	0.15%	—	Hihonor Phoneservice	29/12/2023	17/6/2026	Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVE-2023-51430	Modificada	Media (5.5)	0.15%	—	Hihonor Magic UI	29/12/2023	17/6/2026	Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
CVE-2023-51429	Modificada	Media (5.5)	0.15%	—	Hihonor Magic OS	29/12/2023	17/6/2026	Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
CVE-2023-51428	Modificada	Alta (7.1)	0.16%	—	Hihonor Magic OS	29/12/2023	17/6/2026	Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
CVE-2023-51427	Modificada	Alta (7.1)	0.16%	—	Hihonor Magic OS	29/12/2023	17/6/2026	Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
CVE-2023-51426	Modificada	Alta (7.1)	0.16%	—	Hihonor Magic OS	29/12/2023	17/6/2026	Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
CVE-2023-23443	Modificada	Alta (7.1)	0.16%	—	Hihonor Magic OS	29/12/2023	17/6/2026	Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
CVE-2023-23442	Analizada	Alta (7.1)	0.16%	—	Honor Magicos	29/12/2023	17/6/2026	Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
CVE-2023-23441	Modificada	Media (5.5)	0.17%	—	Hihonor Magic UI	29/12/2023	17/6/2026	Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.
CVE-2023-23440	Modificada	Media (5.5)	0.17%	—	Hihonor Lge-an00 Firmware	29/12/2023	17/6/2026	Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
CVE-2023-23439	Modificada	Media (5.5)	0.16%	—	Hihonor Lge-an00 Firmware	29/12/2023	17/6/2026	Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
CVE-2023-23438	Modificada	Media (5.5)	0.14%	—	Hihonor Lge-an00 Firmware	29/12/2023	17/6/2026	Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions
CVE-2023-23437	Modificada	Media (5.5)	0.17%	—	Hihonor Vmall	29/12/2023	17/6/2026	Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak
CVE-2023-23430	Modificada	Alta (7.5)	0.30%	—	Hihonor Magichome	29/12/2023	17/6/2026	Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVE-2023-23429	Analizada	Alta (7.5)	0.28%	—	Honor Magicos	29/12/2023	17/6/2026	Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVE-2023-23428	Analizada	Alta (7.5)	0.30%	—	Honor Magicos	29/12/2023	17/6/2026	Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVE-2023-23427	Analizada	Alta (7.5)	0.34%	—	Honor Magicos	29/12/2023	17/6/2026	Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.