Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2532▼ 363 respecto a la semana anterior
Críticas / altas1340▲ 76 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (8.1) | 0.35% | — | Mozilla BonsaiAI | 15/6/2026 | 17/6/2026 | Incorrect access control in the impworks Bonsai v6.0 allows authenticated attackers with Editor privileges to escalate privileges to Administrator and execute unauthorized account, password, and configuration changes. | |
| Modificada | Media (5) | 1.8% | — | Mozilla Bonsai | 2/4/2003 | 16/6/2026 | bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication. | |
| Modificada | Media (5) | 5.7% | — | Mozilla Bonsai | 2/4/2003 | 16/6/2026 | bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi. | |
| Modificada | Media (6.8) | 4.6% | — | Mozilla Bonsai | 2/4/2003 | 16/6/2026 | Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to… | |
| Modificada | Alta (7.5) | 2.4% | — | Mozilla Bonsai | 2/4/2003 | 16/6/2026 | Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user. |