Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2768▲ 15 respecto a la semana anterior
Críticas / altas1274▼ 248 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)246▲ 228 respecto a la semana anterior
224 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.1) | 2.4% | — | Zohocorp Manageengine Ad360Zohocorp Manageengine Adaudit PlusZohocorp Manageengine Admanager PlusZohocorp Manageengine Assetexplorer+13 | 28/8/2023 | 17/6/2026 | Zoho ManageEngine Active Directory 360 versiones 4315 e inferiores, ADAudit Plus 7202 e inferiores, ADManager Plus 7200 e inferiores, Asset Explorer 6993 e inferiores y 7xxx 7002 e inferiores, Cloud Security Plus 4161 e inferiores, Data Security Plus 6110 e inferiores, Eventlog Analyzer 12301 y siguientes, Exchange… | |
| Modificada | Media (6.5) | 0.32% | — | Addify Abandoned Cart RecoveryAddify Advanced Free GiftsAddify Checkout Fields ManagerAddify Custom Fields FOR Woocommerce+6 | 31/7/2023 | 17/6/2026 | The Checkout Fields Manager WordPress plugin before 1.0.2, Abandoned Cart Recovery WordPress plugin before 1.2.5, Custom Fields for WooCommerce WordPress plugin before 1.0.4, Custom Order Number WordPress plugin through 1.0.1, Custom Registration Forms Builder WordPress plugin before 1.0.2, Advanced Free Gifts… | |
| Modificada | Media (6.5) | 0.43% | — | Villatheme Abandoned Cart Recovery FOR Woocommerce | 1/7/2023 | 17/6/2026 | The Abandoned Cart Recovery for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the get_items() and extra_tablenav() functions. This makes it possible for unauthenticated attackers to perform… | |
| Modificada | Alta (8.8) | 0.73% | — | Dell Powerprotect Cyber Recovery | 14/6/2023 | 17/6/2026 | Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeover by an attacker. | |
| Modificada | Alta (7.8) | 0.16% | — | Dell OS Recovery Tool | 1/6/2023 | 17/6/2026 | Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability in order to elevate privileges on the system. | |
| Modificada | Media (6.1) | 0.38% | — | Rextheme Cart Lift - Abandoned Cart Recovery FOR Woocommerce AND EDD | 4/5/2023 | 17/6/2026 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD plugin <= 3.1.5 versions. | |
| Modificada | Media (6.8) | 0.67% | — | Oracle Database Recovery Manager | 18/4/2023 | 17/6/2026 | Vulnerability in the Oracle Database Recovery Manager component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having Local SYSDBA privilege with network access via Oracle Net to compromise Oracle Database Recovery… | |
| Modificada | Media (6.5) | 0.66% | — | Veritas System Recovery | 23/9/2022 | 17/6/2026 | Veritas System Recovery (VSR) versiones 18 y 21, almacenan una contraseña de destino de red en el registro de Windows durante la configuración de la copia de seguridad. Esta vulnerabilidad podría permitir a un usuario de Windows (con privilegios suficientes) acceder a un sistema de archivos de red al que no estaba… | |
| Modificada | Crítica (9.1) | 1.2% | — | Dell Powerprotect Cyber Recovery | 1/9/2022 | 17/6/2026 | Dell PowerProtect Cyber Recovery versiones anteriores a 19.11.0.2, contienen una vulnerabilidad de omisión de autenticación. Un atacante remoto no autenticado puede potencialmente acceder e interactuar con la API del registro de Docker, conllevando a una omisión de autenticación. El atacante puede potencialmente… | |
| Modificada | Alta (7.2) | 2.4% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Ejecución de Código Remota en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35772 | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-35785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35786, CVE-2022-35787,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-35785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-35785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-35785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-355785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-355785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-35785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787,… | |
| Modificada | Media (4.9) | 2.2% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787, CVE-2022-35788, CVE-2022-35789, CVE-2022-35790,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787, CVE-2022-35788, CVE-2022-35789, CVE-2022-35790,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787, CVE-2022-35788, CVE-2022-35789, CVE-2022-35790,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-355785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-355785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-35785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787,… | |
| Modificada | Alta (8.1) | 2.0% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787, CVE-2022-35788, CVE-2022-35789, CVE-2022-35790,… | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery | 9/8/2022 | 17/6/2026 | Una vulnerabilidad de Elevación de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35783, CVE-2022-35784, CVE-2022-35784, CVE-2022-35785, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787,… |