Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2553▼ 349 respecto a la semana anterior
Críticas / altas1314▲ 54 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)76▼ 451 respecto a la semana anterior
10 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.3) | 0.29% | — | Desknets NEOAI | 16/10/2025 | 17/6/2026 | Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create malicious AppSuite applications. | |
| Aplazada | Media (4.8) | 0.29% | — | Desknet NEOAI | 16/10/2025 | 17/6/2026 | Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser. | |
| Aplazada | Media (4.6) | 0.30% | — | Desknet NEOAI | 16/10/2025 | 17/6/2026 | Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser. | |
| Aplazada | Media (4.8) | 0.29% | — | Desknet NEOAI | 16/10/2025 | 17/6/2026 | Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser. | |
| Aplazada | Media (5.1) | 0.32% | — | Desknet WEB ServerAI | 16/10/2025 | 17/6/2026 | Reflected cross-site scripting (XSS) vulnerability in desknet's Web Server allows execution of arbitrary JavaScript in a user’s web browser. | |
| Aplazada | Media (4.8) | 0.29% | — | Desknets NEOAI | 16/10/2025 | 17/6/2026 | Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser. | |
| Aplazada | Media (5.3) | 0.27% | — | Desknet NEOAI | 16/10/2025 | 30/9/2026 | desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications. | |
| Modificada | Media (6.1) | 0.78% | — | Desknets NEO | 3/12/2020 | 17/6/2026 | Cross-site scripting vulnerability in desknet's NEO (desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier) allows remote attackers to inject arbitrary script via unspecified vectors. | |
| Modificada | Media (4) | 1.6% | — | Neojapan Desknet NEO | 5/9/2015 | 17/6/2026 | Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter. | |
| Modificada | Media (6.5) | 2.8% | — | NEO Japan Desknets | 27/10/2006 | 16/6/2026 | Buffer overflow in Desknet's (niokeru) before 5.0J R1.0 might allow remote authenticated users to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information. |