Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3034▼ 62 respecto a la semana anterior
Críticas / altas1427▲ 61 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.4) | 0.61% | — | Ganglia-web | 19/11/2024 | 17/6/2026 | A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "g" parameter. | |
| En análisis | Media (5.4) | 0.74% | — | Ganglia-web | 19/11/2024 | 17/6/2026 | A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter. | |
| Modificada | Media (6.1) | 0.79% | — | Ganglia-web | 11/1/2020 | 17/6/2026 | ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter. | |
| Modificada | Media (6.1) | 1.0% | — | Ganglia-web | 11/1/2020 | 17/6/2026 | ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter. | |
| Modificada | Crítica (9.8) | 3.6% | — | Fedoraproject FedoraGanglia-web | 9/8/2017 | 17/6/2026 | ganglia-web before 3.7.1 allows remote attackers to bypass authentication. | |
| Modificada | Media (4.3) | 2.2% | — | Ganglia-web | 2/4/2014 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows remote attackers to inject arbitrary web script or HTML via the view_name parameter. | |
| Modificada | Media (4.3) | 2.2% | — | Ganglia-web | 5/12/2013 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by get_context.php. | |
| Modificada | Media (4.3) | 1.9% | — | Ganglia-web | 14/3/2013 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |
| Modificada | Alta (7.5) | 9.9% | — | Ganglia-web | 6/8/2012 | 16/6/2026 | Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors. |