Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2857▼ 164 respecto a la semana anterior

Críticas / altas1379▲ 45 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 258 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-0705	Modificada	Crítica (9.1)	2.1%	—	Cybozu Dezie	9/1/2019	17/6/2026	Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests.
CVE-2016-7833	Modificada	Alta (7.5)	1.8%	—	Cybozu Dezie	9/6/2017	17/6/2026	Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.
CVE-2016-7832	Modificada	Media (5.3)	1.7%	—	Cybozu Dezie	9/6/2017	17/6/2026	Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.
CVE-2014-5314	Modificada	Alta (9)	3.7%	—	Cybozu Office Cybozu Dezie Cybozu Mailwise	24/11/2014	17/6/2026	Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages.
CVE-2013-6005	Modificada	Media (4.3)	1.3%	—	Cybozu Dezie	13/12/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button.
CVE-2013-2305	Modificada	Media (6.8)	0.64%	—	Cybozu Office Cybozu Dezie Cybozu Mailwise	25/4/2013	16/6/2026	Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.
CVE-2011-1334	Modificada	Media (4.3)	1.2%	—	Cybozu Office Cybozu Garoon Cybozu Dezie Cybozu Mailwise+1	29/6/2011	16/6/2026	Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system."
CVE-2008-6744	Modificada	Media (6.8)	1.0%	—	Cybozu Dezie Cybozu Garoon Cybozu Office	23/4/2009	16/6/2026	Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.