Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2531▼ 362 respecto a la semana anterior

Críticas / altas1340▲ 76 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-4385	Modificada	Media (6.5)	1.6%	—	Trilexnet Letodms Debian Linux	13/11/2019	16/6/2026	letodms 3.3.6 has CSRF via change password
CVE-2012-4384	Modificada	Media (6.1)	1.6%	—	Trilexnet Letodms Debian Linux	13/11/2019	16/6/2026	letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar
CVE-2012-4570	Modificada	Crítica (9.8)	1.9%	—	Letodms Project Letodms	23/10/2017	16/6/2026	SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2012-4569	Modificada	Media (6.1)	1.3%	—	Letodms Project Letodms	23/10/2017	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in out/out.UsrMgr.php in LetoDMS (formerly MyDMS) before 3.3.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-4568	Modificada	Alta (8.8)	1.0%	—	Letodms Project Letodms	23/10/2017	16/6/2026	Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2012-4567	Modificada	Media (6.1)	1.2%	—	Letodms Project Letodms	23/10/2017	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) inc/inc.ClassUI.php or (2) out/out.DocumentNotify.php.
CVE-2010-2007	Modificada	Media (6.8)	0.66%	—	Letodms	20/5/2010	16/6/2026	Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that use (1) op/op.EditUserData.php, (2) op/op.UsrMgr.php, (3) out/out.RemoveVersion.php, (4) op/op.RemoveFolder.php, (5)…
CVE-2010-2006	Modificada	Media (6.5)	6.7%	—	Letodms	20/5/2010	16/6/2026	Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.