Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2535▼ 358 respecto a la semana anterior
Críticas / altas1338▲ 66 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Baja (3.7) | 0.40% | — | GNU SavaneAI | 20/6/2026 | 22/6/2026 | GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization. | |
| Analizada | Alta (7.6) | 0.95% | — | GNU Savane | 11/4/2024 | 17/6/2026 | An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component. | |
| Analizada | Alta (8.8) | 1.3% | — | GNU Savane | 8/4/2024 | 17/6/2026 | An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function. | |
| Analizada | Media (6) | 0.42% | — | GNU Savane | 8/4/2024 | 17/6/2026 | Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.php | |
| Analizada | Alta (7.5) | 0.82% | — | GNU Savane | 8/4/2024 | 17/6/2026 | Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input to the trackers_data_delete_file function. |