Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2568▼ 334 respecto a la semana anterior
Críticas / altas1340▲ 73 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)93▼ 434 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.4% | — | Knime Server | 24/11/2022 | 17/6/2026 | A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being uploaded, can overwrite arbitrary… | |
| Modificada | Media (5.5) | 0.22% | — | Knime Server | 16/12/2021 | 17/6/2026 | KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content. | |
| Modificada | Media (6.1) | 0.76% | — | Knime Server | 8/12/2021 | 17/6/2026 | KNIME Server before 4.13.4 allows XSS via the old WebPortal login page. | |
| Modificada | Alta (7.5) | 1.6% | — | Knime Server | 8/12/2021 | 17/6/2026 | KNIME Server before 4.13.4 allows directory traversal in a request for a client profile. |