Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2573▼ 324 respecto a la semana anterior
Críticas / altas1344▲ 80 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)93▼ 435 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 0.18% | — | Getopensocial Open Social | 26/6/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13. | |
| Analizada | Alta (8.1) | 0.40% | — | Getopensocial Open Social | 31/3/2025 | 17/6/2026 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10. | |
| Analizada | Crítica (9.1) | 0.39% | — | Getopensocial Open Social | 31/3/2025 | 17/6/2026 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10. | |
| Analizada | Media (5.3) | 0.30% | — | Getopensocial Open Social | 9/1/2025 | 17/6/2026 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9. | |
| Analizada | Media (5.3) | 0.36% | — | Getopensocial Open Social | 9/1/2025 | 17/6/2026 | Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5. | |
| Analizada | Media (5.4) | 0.22% | — | Getopensocial Open Social | 9/1/2025 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11. | |
| Analizada | Crítica (9.1) | 0.35% | — | Getopensocial Open Social | 9/1/2025 | 17/6/2026 | Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5. | |
| Analizada | Alta (7.5) | 0.38% | — | Getopensocial Open Social | 9/1/2025 | 17/6/2026 | Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05. | |
| Modificada | Media (4.8) | 0.37% | — | WP Open Social Project WP Open Social | 3/5/2023 | 17/6/2026 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XiaoMac WP Open Social plugin <= 5.0 versions. |