Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2720▼ 598 respecto a la semana anterior

Críticas / altas1299▼ 202 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-48029	Modificada	Alta (8)	1.3%	—	Corebos	17/11/2023	17/6/2026	Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious…
CVE-2023-3073	Modificada	Media (5.4)	0.47%	—	Corebos	2/6/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
CVE-2023-3075	Modificada	Media (6.5)	0.32%	—	Corebos	2/6/2023	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3074	Modificada	Media (5.4)	0.51%	—	Corebos	2/6/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3071	Modificada	Media (5.4)	0.52%	—	Tsolucio Corebos	2/6/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3070	Modificada	Media (5.4)	0.57%	—	Corebos	2/6/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3069	Modificada	Crítica (9.8)	0.60%	—	Corebos	2/6/2023	17/6/2026	Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-1527	Modificada	Media (5.4)	0.54%	—	Corebos	21/3/2023	17/6/2026	Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.
CVE-2022-4446	Modificada	Crítica (9.8)	1.3%	—	Corebos	13/12/2022	17/6/2026	PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.
CVE-2018-1000547	Modificada	Media (5.3)	0.83%	—	Corebos	26/6/2018	17/6/2026	coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to access records that you have no permissions to. .