Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior
Críticas / altas1356▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior
26 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.4) | 0.72% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website (/WorkFlow/OfficeFileUpdate.aspx). This vulnerability can allow attackers to write files to the server or execute arbitrary commands via crafted SQL statements. | |
| Analizada | Crítica (9.8) | 0.51% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the bt_id parameter at /include/get_dict.aspx. | |
| Analizada | Media (5.9) | 0.28% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_show.aspx. | |
| Analizada | Crítica (9.8) | 0.58% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/SearchCondiction.aspx. | |
| Analizada | Crítica (9.8) | 0.58% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/get_find_condiction.aspx. | |
| Analizada | Crítica (9.8) | 0.61% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /WorkFlow/wf_office_file_history_show.aspx. | |
| Analizada | Crítica (9.4) | 0.51% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_show.aspx. | |
| Analizada | Alta (8.1) | 0.59% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter at /ProjectManage/pm_gatt_inc.aspx. | |
| Analizada | Crítica (9.8) | 0.63% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the filename parameter at /WorkFlow/OfficeFileDownload.aspx. | |
| Analizada | Crítica (9.4) | 0.62% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkPlan/WorkPlanAttachDownLoad.aspx. | |
| Analizada | Crítica (9.8) | 0.70% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /filemanage/file_memo.aspx. | |
| Analizada | Crítica (9.4) | 0.61% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the office_missive_id parameter at /WorkFlow/wf_work_form_save.aspx. | |
| Analizada | Crítica (9.4) | 0.62% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the txt_keyword parameter at get_company.aspx. | |
| Analizada | Crítica (9.8) | 0.63% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /SysManage/sys_blogtemplate_new.aspx. | |
| Analizada | Crítica (9.8) | 0.70% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the idlist parameter at /WorkFlow/wf_work_print.aspx. | |
| Analizada | Crítica (9.4) | 0.62% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /WorkFlow/wf_get_fields_approve.aspx. | |
| Analizada | Crítica (9.8) | 0.70% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the tbTable argument at /WebUtility/MF.aspx. | |
| Analizada | Alta (7.3) | 0.58% | — | Ruvaroa | 8/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_work_finish_file_down.aspx. | |
| Analizada | Crítica (9.4) | 0.56% | — | Ruvaroa | 7/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template_child_field_list.aspx. | |
| Analizada | Alta (7.8) | 0.32% | — | Ruvaroa | 7/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_download.aspx. | |
| Analizada | Crítica (9.4) | 0.62% | — | Ruvaroa | 7/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_new.aspx. | |
| Analizada | Crítica (9.8) | 0.69% | — | Ruvaroa | 7/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_show.aspx. | |
| Analizada | Crítica (9.4) | 0.62% | — | Ruvaroa | 7/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_file_download.aspx. | |
| Analizada | Alta (8.1) | 0.53% | — | Ruvaroa | 7/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter at /Bulletin/AttachDownLoad.aspx. | |
| Analizada | Crítica (9.8) | 0.69% | — | Ruvaroa | 7/5/2024 | 17/6/2026 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /bulletin/bulletin_template_show.aspx. |