Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2531▼ 362 respecto a la semana anterior
Críticas / altas1340▲ 76 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (6.9) | 0.36% | — | Perforce GliffyAI | 5/3/2025 | 17/6/2026 | Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server | |
| Aplazada | Media (5.3) | 0.36% | — | GliffyAI | 24/2/2025 | 17/6/2026 | A flaw in Gliffy results in broken authentication through the reset functionality of the application. | |
| Aplazada | Media (5.9) | 0.21% | — | Gliffy OnlineAI | 20/2/2025 | 17/6/2026 | Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery (CSRF) flaw. | |
| Aplazada | Media (6.9) | 0.34% | — | Gliffy OnlineAI | 11/11/2024 | 17/6/2026 | In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD. | |
| Modificada | Media (6.4) | 3.0% | — | Atlassian JiraGliffyAtlassian Confluence Server | 22/5/2012 | 16/6/2026 | The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors. |