Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2532▼ 363 respecto a la semana anterior
Críticas / altas1340▲ 76 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
210 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.8) | 100% | ⚠ Explotación activa | Zohocorp Manageengine Access Manager PlusZohocorp Manageengine Ad360Zohocorp Manageengine Adaudit PlusZohocorp Manageengine Admanager Plus+18 | 18/1/2023 | 31/7/2026 | Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections,… | |
| Modificada | Crítica (9.8) | 1.1% | — | Starcounter-jack Json-patch | 25/12/2022 | 17/6/2026 | A vulnerability has been found in Starcounter-Jack JSON-Patch up to 3.1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack can be initiated remotely. The exploit has… | |
| Modificada | Crítica (9.1) | 1.1% | — | Patchelf Project Patchelf | 19/12/2022 | 17/6/2026 | Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 17/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user\manage_user&id=. | |
| Modificada | Alta (7) | 0.18% | — | Amazon Hotpatch | 17/6/2022 | 17/6/2026 | Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or CVE-2021-45046; it provides a… | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondent_types/manage_respondent_type.php?id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/respondent_types/view_respondent_type.php?id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/view_incident.php?id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/manage_incident.php?id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/teams/manage_team.php?id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/view_team.php?id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/manage_report.php?id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/view_report.php?id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL injection via /rdms/classes/Master.php?f=delete_incident. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_respondent_type. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_report. | |
| Modificada | Crítica (9.8) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_team. | |
| Modificada | Crítica (9.1) | 1.1% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 2/6/2022 | 17/6/2026 | Rescue Dispatch Management System v1.0 is vulnerable to Delete any file via /rdms/classes/Master.php?f=delete_img. | |
| Modificada | Media (5.4) | 0.50% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 23/5/2022 | 17/6/2026 | Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing. | |
| Modificada | Alta (8.8) | 0.98% | — | Rescue Dispatch Management System Project Rescue Dispatch Management System | 23/5/2022 | 17/6/2026 | Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info. | |
| Modificada | Media (6.1) | 0.57% | — | SAP Netweaver AS Abap KernelSAP Netweaver AS Abap Krnl64ucSAP Webdispatcher | 11/5/2022 | 17/6/2026 | The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. | |
| Modificada | Alta (8.8) | 0.38% | — | Amazon Log4jhotpatch | 19/4/2022 | 17/6/2026 | Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to. | |
| Modificada | Alta (8.8) | 0.37% | — | Amazon Log4jhotpatch | 19/4/2022 | 17/6/2026 | The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM being patched, allowing it to escalate privileges. | |
| Modificada | Alta (7.5) | 1.5% | — | SAP NetweaverSAP WEB Dispatcher | 12/4/2022 | 17/6/2026 | Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically. | |
| Modificada | Alta (7.5) | 1.4% | — | SAP NetweaverSAP WEB Dispatcher | 12/4/2022 | 17/6/2026 | By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, which… |