Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2865▼ 160 respecto a la semana anterior
Críticas / altas1384▲ 52 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7) | 0.26% | — | M-files Hubshare | 15/9/2025 | 17/6/2026 | Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users. | |
| Modificada | Media (6.9) | 0.29% | — | M-files Hubshare | 2/10/2024 | 17/6/2026 | Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI | |
| Modificada | Alta (8.5) | 0.35% | — | M-files Hubshare | 29/7/2024 | 17/6/2026 | Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session | |
| Modificada | Alta (8.5) | 0.30% | — | M-files Hubshare | 29/7/2024 | 17/6/2026 | Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session | |
| Modificada | Alta (7) | 0.31% | — | M-files Hubshare | 24/5/2024 | 17/6/2026 | Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser | |
| Modificada | Alta (7.5) | 0.39% | — | M-files Hubshare | 31/10/2022 | 17/6/2026 | Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server. | |
| Modificada | Alta (7.5) | 0.41% | — | M-files Hubshare | 31/10/2022 | 17/6/2026 | Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL. | |
| Modificada | Media (5.4) | 0.39% | — | M-files Hubshare | 31/10/2022 | 17/6/2026 | Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments. | |
| Modificada | Alta (8.8) | 0.52% | — | M-files Hubshare | 31/10/2022 | 17/6/2026 | Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload. |