Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior

Críticas / altas1324▼ 116 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-0338	Modificada	Media (6.1)	0.47%	—	Daloradius	17/1/2023	17/6/2026	Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.
CVE-2023-0337	Modificada	Media (6.1)	0.47%	—	Daloradius	17/1/2023	17/6/2026	Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.
CVE-2023-0048	Modificada	Alta (8.8)	30%	—	Daloradius	4/1/2023	17/6/2026	Code Injection in GitHub repository lirantal/daloradius prior to master-branch.
CVE-2023-0046	Modificada	Alta (7.2)	1.0%	—	Daloradius	4/1/2023	17/6/2026	Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch.
CVE-2022-4630	Modificada	Media (5.3)	0.65%	—	Daloradius	21/12/2022	17/6/2026	Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.
CVE-2022-4366	Modificada	Alta (7.5)	0.72%	—	Daloradius	8/12/2022	17/6/2026	Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.
CVE-2022-23475	Modificada	Alta (8.8)	0.48%	—	Daloradius	6/12/2022	17/6/2026	daloRADIUS is an open source RADIUS web management application. daloRadius 1.3 and prior are vulnerable to a combination cross site scripting (XSS) and cross site request forgery (CSRF) vulnerability which leads to account takeover in the mng-del.php file because of an unescaped variable reflected in the DOM on line…
CVE-2009-4347	Modificada	Media (4.3)	1.1%	—	Liran TAL Daloradius	17/12/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.