Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
133 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.66% | — | Snipeitapp Snipe-it | 1/12/2021 | 17/6/2026 | snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | |
| Modificada | Media (5.4) | 0.76% | — | Snipeitapp Snipe-it | 19/11/2021 | 17/6/2026 | snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | |
| Modificada | Media (5.4) | 0.54% | — | Snipeitapp Snipe-it | 13/11/2021 | 17/6/2026 | snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | |
| Modificada | Media (4.3) | 0.44% | — | Snipeitapp Snipe-it | 13/11/2021 | 17/6/2026 | snipe-it is vulnerable to Cross-Site Request Forgery (CSRF) | |
| Modificada | Media (5.4) | 0.83% | — | Snipeitapp Snipe-it | 19/10/2021 | 17/6/2026 | snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | |
| Modificada | Media (6.1) | 0.79% | — | Snipeitapp Snipe-it | 19/10/2021 | 17/6/2026 | snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | |
| Modificada | Alta (8.8) | 0.54% | — | Snipeitapp Snipe-it | 19/10/2021 | 17/6/2026 | snipe-it is vulnerable to Cross-Site Request Forgery (CSRF) | |
| Modificada | Media (6.1) | 0.85% | — | Snipeitapp Snipe-it | 27/3/2019 | 17/6/2026 | Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API. |