Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2532▼ 361 respecto a la semana anterior
Críticas / altas1338▲ 69 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (4.6) | 0.23% | — | Leica WEB ViewerAILeica Aperio Eslide ManagerAI | 14/3/2025 | 17/6/2026 | The Leica Web Viewer within the Aperio Eslide Manager Application is vulnerable to reflected cross-site scripting (XSS). An authenticated user can access the slides within a project and injecting malicious JavaScript into the "memo" field. The memo field has a hover over action that will display a Microsoft Tool Tip… | |
| Aplazada | Crítica (9.8) | 0.55% | — | Abast Scan Visio Edocument Suite WEB ViewerAI | 21/3/2024 | 17/6/2026 | A SQL Injection has been found on SCAN_VISIO eDocument Suite Web Viewer of Abast. This vulnerability allows an unauthenticated user to retrieve, update and delete all the information of database. This vulnerability was found on login page via "user" parameter. | |
| Modificada | Media (6.1) | 0.31% | — | Orthanc-server Osimis WEB Viewer | 23/1/2024 | 17/6/2026 | A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser. | |
| Modificada | Alta (7.5) | 1.7% | — | Specotech WEB Viewer | 12/5/2021 | 17/6/2026 | Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as demonstrated by reading the /etc/passwd file. | |
| Modificada | Alta (8.8) | 30% | — | Hanwhasecurity WEB Viewer | 6/11/2017 | 17/6/2026 | Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload/… | |
| Modificada | Alta (7.5) | 3.8% | — | Samsung WEB Viewer | 15/1/2016 | 17/6/2026 | Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem encryption via XOR calculations. | |
| Modificada | Alta (7.5) | 6.0% | — | Samsung WEB Viewer | 15/1/2016 | 17/6/2026 | Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading detailed error messages. | |
| Modificada | Alta (8.6) | 51% | — | Samsung WEB Viewer | 15/1/2016 | 17/6/2026 | Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script. | |
| Modificada | Alta (9.3) | 12% | — | Broadcom Output Management WEB Viewer | 27/4/2011 | 16/6/2026 | Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via (1) a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or (2) a long Title property value to the… |