Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2744▼ 71 respecto a la semana anterior

Críticas / altas1416▲ 184 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)106▼ 394 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-41441	Analizada	Media (6.3)	0.39%	—	Synck Mailform PRO CGI	26/5/2025	17/6/2026	Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature.
CVE-2023-40599	Modificada	Alta (7.5)	0.89%	—	Synck Graphica Mailform PRO CGI	25/8/2023	17/6/2026	Regular expression Denial-of-Service (ReDoS) exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js, search/search.js,…
CVE-2023-32610	Modificada	Alta (7.5)	1.3%	—	Synck Mailform PRO CGI	29/6/2023	17/6/2026	Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition.
CVE-2022-38400	Modificada	Media (5.9)	1.5%	—	Synck Mailform PRO CGI	8/9/2022	17/6/2026	Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.
CVE-2015-0883	Modificada	Media (6.8)	2.3%	—	Synck Graphica Mailform PRO CGI	27/2/2015	17/6/2026	SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors.