Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2753▼ 55 respecto a la semana anterior
Críticas / altas1422▲ 195 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)106▼ 394 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AplazadaCrítica (9.6)0.40%—Zscaler Saml AuthenticationAI5/8/202517/6/2026
An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse.
AnalizadaMedia (5.3)0.42%—Logpoint Saml Authentication27/5/202417/6/2026
An issue was discovered in Logpoint SAML Authentication before 6.0.3. An attacker can place a crafted filename in the state field of a SAML SSO-URL response, and the file corresponding to this filename will ultimately be deleted. This can lead to a SAML Authentication login outage.
ModificadaMedia (6.1)0.45%—Nextcloud SSO & Saml Authentication18/1/202417/6/2026
Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for…
ModificadaMedia (6.1)0.41%—Moodle Saml Authentication12/1/202317/6/2026
Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors.