Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2751▲ 28 respecto a la semana anterior
Críticas / altas1468▲ 334 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior
26 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.3) | 0.30% | — | Siemens TIA Project-serverAISiemens Totally Integrated Automation PortalAI | 8/7/2025 | 17/6/2026 | A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19… | |
| Modificada | Alta (7.3) | 0.19% | — | Siemens TIA Multiuser ServerSiemens TIA Project-server | 14/2/2023 | 17/6/2026 | A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1), TIA Project-Server V16 (All versions), TIA Project-Server V17 (All versions < V17 Update 6). Affected applications contain an untrusted… | |
| Modificada | Media (5.4) | 1.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise ServerMicrosoft Sharepoint Server | 15/4/2020 | 17/6/2026 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926,… | |
| Modificada | Media (5.4) | 1.7% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server | 12/6/2019 | 17/6/2026 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker… | |
| Modificada | Media (5.4) | 1.7% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server | 12/6/2019 | 17/6/2026 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker… | |
| Modificada | Media (5.4) | 1.7% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server | 12/6/2019 | 17/6/2026 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker… | |
| Modificada | Alta (8.1) | 42% | — | Microsoft .net FrameworkMicrosoft Project ServerMicrosoft Sharepoint Enterprise ServerMicrosoft Sharepoint Foundation+1 | 11/7/2018 | 17/6/2026 | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework… | |
| Modificada | Media (5.4) | 2.8% | — | Microsoft Project ServerMicrosoft Sharepoint FoundationMicrosoft Sharepoint Server | 14/6/2018 | 17/6/2026 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server, Microsoft SharePoint. This CVE ID is… | |
| Modificada | Media (5.4) | 2.9% | — | Microsoft Project ServerMicrosoft Sharepoint Server | 9/5/2018 | 17/6/2026 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint, Microsoft Project Server. This CVE ID is… | |
| Modificada | Alta (8.8) | 4.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise Server | 14/3/2018 | 17/6/2026 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911,… | |
| Modificada | Alta (8.8) | 4.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise Server | 14/3/2018 | 17/6/2026 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911,… | |
| Modificada | Alta (8.8) | 4.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise Server | 14/3/2018 | 17/6/2026 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911,… | |
| Modificada | Alta (8.8) | 4.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise Server | 14/3/2018 | 17/6/2026 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911,… | |
| Modificada | Alta (8.8) | 4.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise Server | 14/3/2018 | 17/6/2026 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911,… | |
| Modificada | Alta (8.8) | 4.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise Server | 14/3/2018 | 17/6/2026 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911,… | |
| Modificada | Alta (8.8) | 4.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise Server | 14/3/2018 | 17/6/2026 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910, CVE-2018-0912,… | |
| Modificada | Alta (8.8) | 4.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise Server | 14/3/2018 | 17/6/2026 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0911, CVE-2018-0912,… | |
| Modificada | Alta (8.8) | 4.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise Server | 14/3/2018 | 17/6/2026 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0910, CVE-2018-0911, CVE-2018-0912,… | |
| Modificada | Alta (8.8) | 2.5% | — | Microsoft Project ServerMicrosoft Sharepoint Enterprise Server | 15/11/2017 | 17/6/2026 | Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change permissions and delete content, and inject… | |
| Modificada | Media (6.1) | 3.3% | — | Microsoft Project Server | 15/6/2017 | 17/6/2026 | An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS vulnerability". | |
| Modificada | Alta (7.8) | 16% | — | Microsoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB AppsMicrosoft Project Server+4 | 12/5/2017 | 17/6/2026 | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word… | |
| Modificada | Alta (9.3) | 17% | — | Microsoft AccessMicrosoft ExcelMicrosoft InfopathMicrosoft Lync+10 | 11/11/2015 | 17/6/2026 | Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, Excel 2010 SP2, InfoPath 2010 SP2, OneNote 2010 SP2, PowerPoint 2010 SP2, Project 2010 SP2,… | |
| Modificada | Media (4.3) | 8.8% | — | Microsoft Project Server | 14/4/2015 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in Microsoft Project Server 2010 SP2 and 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability." | |
| Modificada | Alta (9) | 14% | — | Microsoft Office WEB Apps ServerMicrosoft Project ServerMicrosoft Sharepoint DesignerMicrosoft Sharepoint Foundation+4 | 14/5/2014 | 17/6/2026 | Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013 Gold and SP1;… | |
| Modificada | Alta (9.3) | 24% | — | Microsoft Office ProjectMicrosoft Project Portfolio ServerMicrosoft Project Server | 9/12/2009 | 16/6/2026 | Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability." |