Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2629▼ 216 respecto a la semana anterior

Críticas / altas1378▲ 154 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior

11 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-48109	Aplazada	Alta (7.1)	0.13%	—	Xavier Media Xm-backup^AI	28/8/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Xavier Media XM-Backup xm-backup allows Stored XSS.This issue affects XM-Backup: from n/a through <= 0.9.1.
CVE-2015-2179	Modificada	Media (5.5)	0.37%	—	Xaviershay-dm-rails Porject Xaviershay-dm-rails	12/12/2023	17/6/2026	The xaviershay-dm-rails gem 0.10.3.8 for Ruby allows local users to discover MySQL credentials by listing a process and its arguments.
CVE-2021-34400	Modificada	Media (4.4)	0.21%	—	Nvidia Dgx-1 P100 Nvidia Dgx-1 V100 Nvidia Dgx-2 Nvidia DGX Station A100+131	20/11/2021	17/6/2026	NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed memory, which may lead to information disclosure.
CVE-2021-34399	Modificada	Media (4.4)	0.21%	—	Nvidia Dgx-1 P100 Nvidia Dgx-1 V100 Nvidia Dgx-2 Nvidia DGX Station A100+131	20/11/2021	17/6/2026	NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed registers, which may lead to information disclosure.
CVE-2021-23219	Modificada	Media (4.1)	0.21%	—	Nvidia Dgx-1 P100 Nvidia Dgx-1 V100 Nvidia Dgx-2 Nvidia DGX Station A100+131	20/11/2021	17/6/2026	NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to access protected information by identifying, exploiting, and loading vulnerable microcode. Such an attack may lead to information disclosure.
CVE-2021-1125	Modificada	Media (4.4)	0.20%	—	Nvidia Dgx-1 P100 Nvidia Dgx-1 V100 Nvidia Dgx-2 Nvidia DGX Station A100+103	20/11/2021	17/6/2026	NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to corrupt program data.
CVE-2021-1105	Modificada	Media (4.4)	0.21%	—	Nvidia Dgx-1 P100 Nvidia Dgx-1 V100 Nvidia Dgx-2 Nvidia DGX Station A100+131	20/11/2021	17/6/2026	NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to information disclosure.
CVE-2021-1088	Modificada	Media (4.4)	0.21%	—	Nvidia Dgx-1 P100 Nvidia Dgx-1 V100 Nvidia Dgx-2 Nvidia DGX Station A100+131	20/11/2021	17/6/2026	NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient access control, which may lead to information disclosure.
CVE-2019-14228	Modificada	Media (6.1)	0.43%	—	Angry-frog Xavier	26/7/2019	17/6/2026	Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect via the error page. Due to the lack of CSRF protection on the…
CVE-2017-15949	Modificada	Alta (7.2)	0.93%	—	Angry-frog Xavier	28/10/2017	17/6/2026	Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the log_id parameter to admin/editgroup.php.
CVE-2000-1150	Modificada	Media (5)	1.3%	—	Xavier Ducrohet Felix	9/1/2001	16/6/2026	Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.