Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2741▲ 13 respecto a la semana anterior
Críticas / altas1459▲ 323 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.9) | 0.32% | — | B3log Vditor | 5/7/2024 | 17/6/2026 | vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet. | |
| Analizada | Media (6.1) | 0.36% | — | B3log Vditor | 3/5/2024 | 17/6/2026 | Vditor 3.10.3 allows XSS via an attribute of an A element. NOTE: the vendor indicates that a user is supposed to mitigate this via sanitize=true. | |
| Modificada | Media (6.1) | 0.58% | — | B3log Vditor | 21/2/2023 | 17/6/2026 | Vditor is a browser-side Markdown editor. Versions prior to 3.8.7 are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. Version 3.8.7 contains a patch for this issue. | |
| Modificada | Media (5.4) | 0.55% | — | B3log Vditor | 31/3/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13. | |
| Modificada | Media (5.4) | 0.47% | — | B3log Vditor | 14/3/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.12. | |
| Modificada | Media (5.4) | 0.66% | — | B3log Vditor | 23/1/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 1.0.34. |