Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2855▼ 166 respecto a la semana anterior
Críticas / altas1379▲ 45 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 0.51% | — | Qstar Archive Storage Manager | 13/1/2024 | 17/6/2026 | An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link. | |
| Modificada | Alta (7.5) | 0.55% | — | Qstar Archive Storage Manager | 13/1/2024 | 17/6/2026 | An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily adjust sensitive SMB settings on the QStar Server. | |
| Modificada | Media (5.4) | 0.35% | — | Qstar Archive Storage Manager | 13/1/2024 | 17/6/2026 | An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link. | |
| Modificada | Media (6.1) | 0.41% | — | Qstar Archive Storage Manager | 13/1/2024 | 17/6/2026 | An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link. | |
| Modificada | Alta (8.8) | 1.5% | — | Qstar Archive Storage Manager | 13/1/2024 | 17/6/2026 | An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows attackers to arbitrarily execute commands. | |
| Modificada | Alta (7.5) | 0.65% | — | Qstar Archive Storage Manager | 13/1/2024 | 17/6/2026 | Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to obtain system backups and other sensitive information from the QStar Server. | |
| Modificada | Media (6.1) | 0.38% | — | Qstar Archive Storage Manager | 13/1/2024 | 17/6/2026 | QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the component qnme-ajax?method=tree_table. | |
| Modificada | Alta (8.8) | 0.32% | — | Qstar Archive Storage Manager | 13/1/2024 | 17/6/2026 | QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting (XSS) vulnerability within the component qnme-ajax?method=tree_level. | |
| Modificada | Media (5.3) | 0.50% | — | Qstar Archive Storage Manager | 13/1/2024 | 17/6/2026 | An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0 allows attackers to disclose the SMB Log contents via executing a crafted command. |