Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2571▼ 329 respecto a la semana anterior
Críticas / altas1341▲ 75 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)93▼ 434 respecto a la semana anterior
36 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Alta (7.7) | 0.63% | — | Redhat Multicluster EngineAIRedhat Clusterclaims ControllerAI | 21/8/2026 | 29/9/2026 | A flaw was found in the clusterclaims-controller component of multicluster engine (MCE). A tenant with standard permissions to create and delete ClusterClaim resources can exploit this by manipulating the `spec.namespace` field. This allows the tenant to specify and delete any ManagedCluster, including the hub's… | |
| Pendiente de análisis | Alta (7.1) | 0.35% | — | Redhat Multicluster EngineAIRedhat Clusterclaims ControllerAI | 13/8/2026 | 29/9/2026 | A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE). An authenticated tenant can exploit this vulnerability by manipulating ClusterClaim labels. This allows the tenant to force a cluster to join a ManagedClusterSet belonging to another tenant. Such unauthorized access could enable… | |
| Aplazada | Media (5.9) | 0.21% | — | Amp-mode Review-disclaimerAI | 24/12/2025 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AMP-MODE Review Disclaimer review-disclaimer allows Stored XSS.This issue affects Review Disclaimer: from n/a through <= 2.0.3. | |
| Aplazada | Media (4.3) | 0.34% | — | SAP Financial Service Claims ManagementAI | 14/10/2025 | 17/6/2026 | A vulnerability in SAP Financial Service Claims Management RFC function ICL_USER_GET_NAME_AND_ADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability. | |
| Aplazada | Media (5.9) | 0.22% | — | Mosswebworks MWW Disclaimer ButtonsAI | 26/9/2025 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jennifer Moss MWW Disclaimer Buttons mww-disclaimer-buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through <= 3.41. | |
| Aplazada | Media (4.3) | 0.24% | — | Hivepress Claim ListingsAI | 26/9/2025 | 17/6/2026 | Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from n/a through <= 1.1.3. | |
| Aplazada | Media (4.3) | 0.24% | — | Hivepress Claim ListingsAI | 26/9/2025 | 17/6/2026 | Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from n/a through <= 1.1.4. | |
| Analizada | Alta (7.8) | 0.34% | — | Ansys Spaceclaim | 3/5/2024 | 17/6/2026 | Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or… | |
| Modificada | Media (4.8) | 0.34% | — | Mosswebworks MWW Disclaimer Buttons | 15/4/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2. | |
| Aplazada | Media (6.5) | 0.35% | — | Krunal Prajapati WP Post DisclaimerAI | 27/3/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Krunal Prajapati WP Post Disclaimer allows Stored XSS.This issue affects WP Post Disclaimer: from n/a through 1.0.3. | |
| Modificada | Media (5.3) | 0.88% | — | Evohclaimable Project Evohclaimable | 21/9/2022 | 17/6/2026 | Access control vulnerability in Evoh NFT EvohClaimable contract with sha256 hash code fa2084d5abca91a62ed1d2f1cad3ec318e6a9a2d7f1510a00d898737b05f48ae allows remote attackers to execute fraudulent NFT transfers. | |
| Modificada | Alta (7.8) | 0.58% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_T files. The… | |
| Modificada | Alta (7.8) | 0.58% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.58% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.81% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.62% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.62% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.88% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.58% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.62% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.62% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.58% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.62% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.62% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… | |
| Modificada | Alta (7.8) | 0.58% | — | Ansys Spaceclaim | 15/9/2022 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The… |