Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3041▲ 585 respecto a la semana anterior
Críticas / altas1451▲ 285 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)393▲ 186 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Baja (2.3) | 0.37% | — | Temporal UI ServerAI | 11/8/2026 | 8/9/2026 | When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection. Temporal UI Server can therefore issue access-token cookies, and… | |
| Modificada | Alta (8.1) | 1.0% | — | Suse Studio OnsiteSusestudio-ui-server | 27/1/2020 | 17/6/2026 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in Studio to alter SQL statements, allowing for extraction and modification of data. This issue affects: SUSE Studio onsite… | |
| Modificada | Media (5.9) | 0.44% | — | Suse Studio OnsiteSusestudio-ui-server | 27/1/2020 | 17/6/2026 | A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior… |