Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 237 respecto a la semana anterior

Críticas / altas1384▲ 151 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

44 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-67796	Pendiente de análisis	Alta (8.1)	0.24%	—	Ikus Rdiffweb^AI	4/5/2026	17/6/2026	IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users data and, in some…
CVE-2023-5289	Modificada	Alta (8.8)	0.78%	—	Ikus-soft Rdiffweb	29/9/2023	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
CVE-2023-4138	Modificada	Media (6.5)	0.45%	—	Ikus-soft Rdiffweb	3/8/2023	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.
CVE-2022-4724	Modificada	Crítica (9.8)	0.85%	—	Ikus-soft Rdiffweb	27/12/2022	17/6/2026	Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4723	Modificada	Media (6.5)	0.65%	—	Ikus-soft Rdiffweb	27/12/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4722	Modificada	Alta (7.2)	1.2%	—	Ikus-soft Rdiffweb	27/12/2022	17/6/2026	Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4721	Modificada	Media (5.4)	0.50%	—	Ikus-soft Rdiffweb	27/12/2022	17/6/2026	Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4720	Modificada	Media (6.1)	0.50%	—	Ikus-soft Rdiffweb	27/12/2022	17/6/2026	Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4719	Modificada	Crítica (9.8)	1.0%	—	Ikus-soft Rdiffweb	27/12/2022	17/6/2026	Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4646	Modificada	Media (6.5)	0.33%	—	Ikus-soft Rdiffweb	22/12/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.
CVE-2022-4644	Modificada	Media (6.1)	0.62%	—	Ikus-soft Rdiffweb	22/12/2022	17/6/2026	Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
CVE-2022-4314	Modificada	Crítica (9.8)	0.82%	—	Ikus-soft Rdiffweb	12/12/2022	17/6/2026	Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.
CVE-2022-4018	Modificada	Media (4.3)	0.87%	—	Ikus-soft Rdiffweb	16/11/2022	17/6/2026	Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
CVE-2022-3362	Modificada	Crítica (9.8)	0.94%	—	Ikus-soft Rdiffweb	14/11/2022	17/6/2026	Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVE-2022-3363	Modificada	Crítica (9.8)	0.84%	—	Ikus-soft Rdiffweb	26/10/2022	17/6/2026	Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.
CVE-2022-3327	Modificada	Crítica (9.8)	0.84%	—	Ikus-soft Rdiffweb	20/10/2022	17/6/2026	Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
CVE-2022-3439	Modificada	Crítica (9.8)	0.68%	—	Ikus-soft Rdiffweb	14/10/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVE-2022-3457	Modificada	Crítica (9.8)	0.36%	—	Ikus-soft Rdiffweb	13/10/2022	17/6/2026	Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.
CVE-2022-3456	Modificada	Crítica (9.8)	0.37%	—	Ikus-soft Rdiffweb	13/10/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVE-2022-3438	Modificada	Media (6.1)	0.55%	—	Ikus-soft Rdiffweb	10/10/2022	17/6/2026	Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVE-2022-3389	Modificada	Alta (7.5)	1.4%	—	Ikus-soft Rdiffweb	6/10/2022	17/6/2026	Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.
CVE-2022-3376	Modificada	Media (5.3)	0.85%	—	Ikus-soft Rdiffweb	6/10/2022	17/6/2026	Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVE-2022-3273	Modificada	Crítica (9.8)	0.55%	—	Ikus-soft Rdiffweb	6/10/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVE-2022-3371	Modificada	Alta (7.5)	1.3%	—	Ikus-soft Rdiffweb	30/9/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
CVE-2022-3364	Modificada	Alta (7.5)	1.2%	—	Ikus-soft Rdiffweb	29/9/2022	17/6/2026	Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.