Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3007▼ 67 respecto a la semana anterior
Críticas / altas1403▲ 50 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)390▼ 120 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.2) | 1.9% | — | Synametrics Synaman | 6/4/2022 | 9/7/2026 | The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges. | |
| Modificada | Alta (7.8) | 0.31% | — | Synametrics Synaman | 6/4/2022 | 9/7/2026 | Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges. | |
| Modificada | Alta (7.5) | 2.1% | — | Synametrics Synaman | 27/1/2022 | 17/6/2026 | An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string. | |
| Modificada | Alta (8.8) | 1.3% | — | Synametrics SynamanSynametrics SyncrifySynametrics Syntail | 21/11/2019 | 17/6/2026 | Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567 | |
| Modificada | Alta (7.8) | 1.4% | — | Synametrics Synaman | 14/9/2018 | 17/6/2026 | Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials. | |
| Modificada | Media (4.8) | 1.7% | — | Synametrics Synaman | 14/9/2018 | 17/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial Branding configuration page. |