Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2577▼ 311 respecto a la semana anterior
Críticas / altas1352▲ 96 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
28 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (8.2) | 0.28% | — | Owncloud DrawioAIOwncloud ClassicAI | 6/7/2026 | 29/9/2026 | DrawIO for ownCloud is an application for using DrawIO with the file storage, synchronization, and sharing application ownCloud Classic. In DrawIO for ownCloud prior to version 1.0.2, which corresponds to ownCloud 10 prior to version 10.15.3, attackers with access to the DrawIO app can leverage improper neutralization… | |
| Analizada | Media (6.1) | 0.32% | — | Diagrams Drawio | 10/6/2026 | 17/6/2026 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.12, a crafted .drawio file can execute arbitrary JavaScript in the editor's origin when the file is opened. The vulnerability is not in the label sanitizer (which works correctly on the rendering path) but in a feature-detection… | |
| Modificada | Crítica (9.8) | 2.3% | — | Diagrams Drawio | 27/7/2023 | 17/6/2026 | OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0. | |
| Modificada | Crítica (9.8) | 1.2% | — | Diagrams Drawio | 27/7/2023 | 17/6/2026 | OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0. | |
| Modificada | Media (6.1) | 0.40% | — | Diagrams Drawio | 27/7/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3. | |
| Modificada | Alta (7.5) | 0.97% | — | Diagrams Drawio | 26/6/2023 | 17/6/2026 | Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3. | |
| Modificada | Media (6.1) | 0.53% | — | Diagrams Drawio | 1/6/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8. | |
| Modificada | Media (6.1) | 0.67% | — | Diagrams Drawio | 7/11/2022 | 17/6/2026 | Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2. | |
| Modificada | Media (6.1) | 0.80% | — | Diagrams Drawio | 16/9/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.3.1. | |
| Modificada | Alta (7.8) | 1.2% | — | Diagrams Drawio | 9/9/2022 | 17/6/2026 | OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0. | |
| Modificada | Media (6.1) | 0.66% | — | Diagrams Drawio | 8/9/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0. | |
| Modificada | Media (6.1) | 0.66% | — | Diagrams Drawio | 8/9/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0. | |
| Modificada | Media (5.4) | 0.63% | — | Diagrams Drawio | 5/9/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8. | |
| Modificada | Alta (7.5) | 1.3% | — | Diagrams Drawio | 2/9/2022 | 17/6/2026 | Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8. | |
| Modificada | Media (5.4) | 0.64% | — | Diagrams Drawio | 9/6/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2. | |
| Modificada | Media (5.4) | 0.73% | — | Diagrams Drawio | 9/6/2022 | 17/6/2026 | Code Injection in GitHub repository jgraph/drawio prior to 19.0.2. | |
| Modificada | Alta (7.5) | 5.4% | — | Diagrams Drawio | 25/5/2022 | 17/6/2026 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2. | |
| Modificada | Alta (7.5) | 1.8% | — | Diagrams Drawio | 20/5/2022 | 17/6/2026 | Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.8. | |
| Modificada | Media (4.6) | 0.61% | — | Diagrams Drawio | 19/5/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4. | |
| Modificada | Media (6.1) | 1.2% | — | Diagrams Drawio | 18/5/2022 | 17/6/2026 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7. | |
| Modificada | Alta (7.5) | 1.8% | — | Diagrams Drawio | 18/5/2022 | 17/6/2026 | Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.7. | |
| Modificada | Alta (8.8) | 1.4% | — | Diagrams Drawio | 18/5/2022 | 17/6/2026 | Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6. | |
| Modificada | Alta (7.5) | 5.9% | — | Diagrams Drawio | 17/5/2022 | 17/6/2026 | Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5. | |
| Modificada | Alta (7.5) | 1.7% | — | Diagrams Drawio | 17/5/2022 | 17/6/2026 | Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6. | |
| Modificada | Baja (3.3) | 0.54% | — | Diagrams Drawio | 16/5/2022 | 17/6/2026 | SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses |