Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior
Críticas / altas1284▼ 85 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
15 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.45% | — | SFU PKP WEB Application Library | 7/11/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Media (5.4) | 0.45% | — | SFU PKP WEB Application Library | 7/11/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Media (4.3) | 0.26% | — | SFU PKP WEB Application Library | 7/11/2023 | 17/6/2026 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Media (4.8) | 0.46% | — | SFU PKP WEB Application Library | 7/11/2023 | 17/6/2026 | Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Media (4.3) | 0.24% | — | SFU PKP WEB Application Library | 7/11/2023 | 17/6/2026 | Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Media (5.3) | 0.62% | — | SFU PKP WEB Application Library | 6/11/2023 | 17/6/2026 | PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image. | |
| Modificada | Alta (8.8) | 0.26% | — | PKP WEB Application Library | 1/11/2023 | 17/6/2026 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Alta (8.8) | 0.26% | — | PKP WEB Application Library | 1/11/2023 | 17/6/2026 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Media (5.4) | 0.34% | — | SFU PKP WEB Application Library | 1/11/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4. | |
| Modificada | Media (5.4) | 0.41% | — | SFU PKP WEB Application Library | 1/11/2023 | 17/6/2026 | Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Alta (8.8) | 0.26% | — | SFU PKP WEB Application Library | 1/11/2023 | 17/6/2026 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Media (5.4) | 0.40% | — | SFU PKP WEB Application Library | 1/11/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Media (5.4) | 0.40% | — | SFU PKP WEB Application Library | 1/11/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Media (5.4) | 0.40% | — | SFU PKP WEB Application Library | 1/11/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | |
| Modificada | Alta (8.2) | 0.44% | — | PKP WEB Application Library | 1/11/2023 | 17/6/2026 | Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |