Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior

Críticas / altas1293▼ 208 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-23638	Modificada	Media (6.1)	0.68%	—	Svg-sanitizer Project Svg-sanitizer	14/2/2022	17/6/2026	svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-sanitizer` library prior to version 0.15.0. This issue is fixed in version 0.15.0. There is currently no workaround available.
CVE-2020-11070	Modificada	Media (5.4)	0.54%	—	Typo3 SVG Sanitizer	13/5/2020	17/6/2026	The SVG Sanitizer extension for TYPO3 has a cross-site scripting vulnerability in versions before 1.0.3. Slightly invalid or incomplete SVG markup is not correctly processed and thus not sanitized at all. Albeit the markup is not valid it still is evaluated in browsers and leads to cross-site scripting. This is fixed…
CVE-2019-10772	Modificada	Media (6.1)	0.74%	—	Svg-sanitizer Project Svg-sanitizer	11/12/2019	17/6/2026	It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the "xlink:href" attribute due to mishandling of the xlink namespace by the sanitizer.
CVE-2019-18857	Modificada	Alta (7.5)	1.0%	—	Svg-sanitizer Project Svg-sanitizer	11/11/2019	17/6/2026	darylldoyle svg-sanitizer before 0.12.0 mishandles script and data values in attributes, as demonstrated by unexpected whitespace such as in the javascript :alert substring.
CVE-2019-18856	Modificada	Alta (7.5)	1.4%	—	Drupal SVG Sanitizer	11/11/2019	17/6/2026	A Denial Of Service vulnerability exists in the SVG Sanitizer module through 8.x-1.0-alpha1 for Drupal because access to external resources with an SVG use element is mishandled.