Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2528▼ 418 respecto a la semana anterior
Críticas / altas1311▲ 21 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)99▼ 428 respecto a la semana anterior
538 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.3) | 0.21% | — | Siemens ParasolidSiemens Teamcenter Visualization | 8/8/2023 | 17/6/2026 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Teamcenter Visualization V14.1 (All versions), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization… | |
| Modificada | Alta (7.3) | 0.21% | — | Siemens ParasolidSiemens Teamcenter Visualization | 8/8/2023 | 17/6/2026 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization… | |
| Modificada | Alta (7.3) | 0.21% | — | Siemens ParasolidSiemens Teamcenter Visualization | 8/8/2023 | 17/6/2026 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization… | |
| Modificada | Baja (2) | 0.20% | — | Siemens ParasolidSiemens Teamcenter Visualization | 8/8/2023 | 17/6/2026 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization… | |
| Modificada | Alta (7.8) | 0.22% | — | Siemens JT OpenSiemens JT UtilitiesSiemens Parasolid | 8/8/2023 | 17/6/2026 | A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < V34.0.253), Parasolid V34.1 (All versions < V34.1.243), Parasolid V35.0 (All versions < V35.0.177), Parasolid V35.1 (All versions < V35.1.073). The affected applications contain… | |
| Modificada | Alta (7.5) | 0.77% | — | Getnet Argentina Para Woocommerce Project Getnet Argentina Para Woocommerce | 12/7/2023 | 17/6/2026 | The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without payment. | |
| Modificada | Alta (8.8) | 61% | — | Jenkins File Parameters | 16/5/2023 | 17/6/2026 | Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content. | |
| Modificada | Alta (7.2) | 0.39% | — | Juniper Paragon Active Assurance | 17/4/2023 | 17/6/2026 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Juniper Networks Paragon Active Assurance (PAA) (Formerly Netrounds) allows an attacker to bypass existing firewall rules and limitations used to restrict internal communcations. The Test Agents (TA)… | |
| Modificada | Media (6.5) | 0.46% | — | Jenkins Image TAG Parameter | 12/4/2023 | 17/6/2026 | Jenkins Image Tag Parameter Plugin 2.0 improperly introduces an option to opt out of SSL/TLS certificate validation when connecting to Docker registries, resulting in job configurations using Image Tag Parameters that were created before 2.0 having SSL/TLS certificate validation disabled by default. | |
| Modificada | Media (4.8) | 0.39% | — | Thisfunctional CTT Expresso Para Woocommerce | 23/3/2023 | 17/6/2026 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in this.Functional CTT Expresso para WooCommerce plugin <= 3.2.11 versions. | |
| Modificada | Alta (7.5) | 44% | — | Paradox Ipr512 Firmware | 21/3/2023 | 17/6/2026 | An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters. | |
| Modificada | Alta (7.8) | 0.21% | — | Siemens ParasolidSiemens Solid Edge | 14/2/2023 | 17/6/2026 | A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Solid Edge SE2022 (All versions < V222.0MP12). The affected applications contain an out of bounds read… | |
| Modificada | Alta (7.8) | 0.23% | — | Siemens JT Open ToolkitSiemens JT UtilitiesSiemens Parasolid | 14/2/2023 | 17/6/2026 | A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application… | |
| Modificada | Alta (7.5) | 0.68% | — | Paranoidhttp Project Paranoidhttp | 30/1/2023 | 17/6/2026 | Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses. | |
| Modificada | Crítica (9.8) | 0.81% | — | Flitto Express-param | 31/12/2022 | 17/6/2026 | A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address… | |
| Modificada | Alta (7.8) | 0.53% | — | Siemens Parasolid | 13/12/2022 | 17/6/2026 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All… | |
| Modificada | Alta (7.8) | 0.34% | — | Siemens Parasolid | 13/12/2022 | 17/6/2026 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All… | |
| Modificada | Alta (7.8) | 0.52% | — | Siemens Parasolid | 13/12/2022 | 17/6/2026 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All… | |
| Modificada | Alta (7.8) | 0.34% | — | Siemens ParasolidSiemens Solid Edge Se2022Siemens Solid Edge Se2023 | 13/12/2022 | 17/6/2026 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All… | |
| Modificada | Alta (7.8) | 0.34% | — | Siemens ParasolidSiemens Solid Edge Se2022Siemens Solid Edge Se2023 | 13/12/2022 | 17/6/2026 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All… | |
| Modificada | Alta (8.1) | 2.1% | — | Parallels Remote Application Server | 23/11/2022 | 17/6/2026 | The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header. | |
| Modificada | Alta (7.8) | 0.24% | — | Siemens Parasolid | 8/11/2022 | 17/6/2026 | A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Simcenter Femap (All versions < V2023.1). The affected application contains an out of bounds write past the end of an allocated buffer while parsing… | |
| Modificada | Alta (7.8) | 0.24% | — | Siemens Parasolid | 8/11/2022 | 17/6/2026 | A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.0 (All versions >= V34.0.252 < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V34.1 (All versions >= V34.1.242 < V34.1.244), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.0 (All versions >=… | |
| Modificada | Media (5.4) | 0.85% | — | Jenkins Custom Checkbox Parameter | 19/10/2022 | 17/6/2026 | Jenkins Custom Checkbox Parameter Plugin 1.4 and earlier does not escape the name and description of Custom Checkbox Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. | |
| Modificada | Alta (8.4) | 0.73% | — | Juniper Paragon Active Assurance Control Center | 18/10/2022 | 17/6/2026 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability, a stored XSS (or persistent), in the Control Center Controller web pages of Juniper Networks Paragon Active Assurance (Formerly Netrounds) allows a high-privilege attacker with 'WRITE' permissions to store one or… |