Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.8) | 0.68% | — | Hgiga Oaklouds-organization-2.0Hgiga Oaklouds-organization-3.0Hgiga Oaklouds-webbase-2.0Hgiga Oaklouds-webbase-3.0 | 15/2/2024 | 17/6/2026 | The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being downloaded. | |
| Analizada | Crítica (9.8) | 1.6% | — | Hgiga Oaklouds-organization-2.0Hgiga Oaklouds-organization-3.0Hgiga Oaklouds-webbase-2.0Hgiga Oaklouds-webbase-3.0 | 15/2/2024 | 17/6/2026 | The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters. This enables the execution of arbitrary code on the remote server without permission. |