Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2686▼ 84 respecto a la semana anterior

Críticas / altas1444▲ 301 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-49949	Modificada	Alta (8.1)	0.63%	—	Passwork	26/12/2023	17/6/2026	Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes.
CVE-2022-42956	Modificada	Alta (7.5)	0.38%	—	Passwork	7/11/2022	17/6/2026	The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password.
CVE-2022-42955	Modificada	Alta (7.5)	0.38%	—	Passwork	7/11/2022	17/6/2026	The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.
CVE-2022-25269	Modificada	Media (6.1)	0.57%	—	Passwork	23/3/2022	17/6/2026	Passwork On-Premise Edition before 4.6.13 has multiple XSS issues.
CVE-2022-25268	Modificada	Alta (8.8)	0.42%	—	Passwork	23/3/2022	17/6/2026	Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems.
CVE-2022-25267	Modificada	Alta (8.8)	1.5%	—	Passwork	23/3/2022	17/6/2026	Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files).
CVE-2022-25266	Modificada	Media (4.3)	0.95%	—	Passwork	23/3/2022	17/6/2026	Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal (to read files).