Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3035▼ 39 respecto a la semana anterior

Críticas / altas1415▲ 62 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)385▼ 125 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-44905	Modificada	Alta (8.2)	1.3%	—	CEF Fortessa Ftbtld Firmware	25/3/2022	17/6/2026	Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthenticated edit to the lock name.
CVE-2022-22833	Modificada	Alta (7.5)	12%	—	Servisnet Tessa	6/2/2022	17/6/2026	An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request.
CVE-2022-22832	Modificada	Crítica (9.8)	14%	—	Servisnet Tessa	6/2/2022	17/6/2026	An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request.
CVE-2022-22831	Modificada	Crítica (9.8)	11%	—	Servisnet Tessa	6/2/2022	17/6/2026	An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP header.
CVE-2014-7417	Modificada	Media (5.4)	0.27%	—	Realacademiabellasartessanfernando Real Academia DE Bellas Artes	19/10/2014	17/6/2026	The Real Academia de Bellas Artes (aka com.adianteventures.adianteapps.real_academia_de_bellas_artes) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.