Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2629▼ 216 respecto a la semana anterior
Críticas / altas1378▲ 154 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior
16 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (4.3) | 0.26% | — | Netwrix Directory Manager | 7/8/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authenticated users. | |
| Analizada | Media (5.4) | 0.24% | — | Netwrix Directory Manager | 7/8/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated users can exploit this. | |
| Analizada | Media (6.1) | 0.25% | — | Netwrix Directory Manager | 7/8/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data. | |
| Analizada | Media (5.3) | 0.29% | — | Netwrix Directory Manager | 7/8/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources. | |
| Analizada | Media (5.4) | 0.24% | — | Netwrix Directory Manager | 7/8/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authenticated users can obtain administrative access. | |
| Analizada | Media (6.1) | 0.34% | — | Netwrix Directory Manager | 7/8/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vulnerability than CVE-2025-47189. | |
| Aplazada | Media (6.1) | 0.26% | — | Netwrix Directory ManagerAI | 17/7/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data of certain user flows, a different vulnerability than CVE-2025-54392. | |
| Analizada | Crítica (10) | 0.40% | — | Netwrix Directory Manager | 29/5/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password. | |
| Analizada | Crítica (9.1) | 0.43% | — | Netwrix Directory Manager | 28/5/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data. | |
| Analizada | Media (5) | 0.25% | — | Netwrix Directory Manager | 28/5/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource. | |
| Analizada | Media (5.3) | 0.34% | — | Netwrix Directory Manager | 28/5/2025 | 17/6/2026 | Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password. | |
| Analizada | Media (6.5) | 0.27% | — | Netwrix Directory Manager | 28/5/2025 | 17/6/2026 | Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function. | |
| Modificada | Media (5.4) | 0.39% | — | Lava-code Lava Directory Manager | 14/11/2023 | 17/6/2026 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <= 1.1.34 versions. | |
| Modificada | Media (6.1) | 0.33% | — | Lava-code Lava Directory Manager | 26/10/2023 | 17/6/2026 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <= 1.1.34 versions. | |
| Modificada | Alta (7.5) | 1.2% | — | Dmxready Member Directory Manager | 5/2/2009 | 16/6/2026 | SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter. | |
| Modificada | Alta (7.5) | 3.4% | — | Vibechild Directory Manager | 5/9/2001 | 16/6/2026 | edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function. |