Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

Borrar filtros
CVE ID Publicado Severidad CVSS Descripción
CVE-2022-50706 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: net/ieee802154: don't warn zero-sized raw_sendmsg() syzbot is hitting skb_assert_len() warning at __dev_queue_xmit() [1], for PF_IEEE802154 socket's zero-sized raw_sendmsg()…
CVE-2022-50705 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: defer fsnotify calls to task context We can't call these off the kiocb completion as that might…
CVE-2022-50704 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free during usb config switch In the process of switching USB config from rndis to…
CVE-2022-50703 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak bugs in qcom_smsm_probe(): (1)…
CVE-2022-50702 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() Inject fault while probing module, if device_register() fails in…
CVE-2022-50701 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host SDIO may need addtional 511 bytes to align bus…
CVE-2022-50700 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Delay the unmapping of the buffer On WCN3990, we are seeing a rare scenario where copy…
CVE-2022-50699 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() The following warning was triggered on a hardware…
CVE-2022-50698 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() If clk_hw_register() fails, the corresponding clk should not be…
CVE-2022-50697 2025-12-24 N/A 0.0 In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant uninit The caller of del_timer_sync must prevent restarting of…
CVE-2025-64641 2025-12-24 MEDIUM 4.1 Mattermost versions 11.1.x
CVE-2025-13767 2025-12-24 MEDIUM 4.3 Mattermost versions 11.1.x
CVE-2025-57840 2025-12-24 LOW 2.2 ADB(Android Debug Bridge) is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability.
CVE-2024-58335 2025-12-24 MEDIUM 5.0 OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java.
CVE-2025-66445 2025-12-24 HIGH 7.1 Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure…
CVE-2025-66444 2025-12-24 HIGH 8.2 Cross-site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure…
CVE-2025-13773 2025-12-24 CRITICAL 9.8 The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerce_Delivery_Notes::update'…
CVE-2025-68695 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68694 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68693 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68692 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68691 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68690 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68689 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68688 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-68687 2025-12-24 N/A 0.0 Rejected reason: Not used
CVE-2025-15053 2025-12-24 HIGH 7.3 A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can…
CVE-2025-15052 2025-12-24 LOW 3.5 A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross…
CVE-2025-15050 2025-12-24 MEDIUM 6.3 A security vulnerability has been detected in code-projects Student File Management System 1.0. This affects an unknown part of the file /save_file.php. Such manipulation of the argument File…
CVE-2025-68667 2025-12-23 N/A 0.0 continuwuity is a Matrix homeserver written in Rust. Prior to version 0.5.0, this vulnerability allows a remote, unauthenticated attacker to force the target server to cryptographically sign arbitrary…
CVE-2025-15049 2025-12-23 HIGH 7.3 A vulnerability was identified in code-projects Online Farm System 1.0. Affected is an unknown function of the file /addProduct.php. The manipulation of the argument Username leads to sql…
CVE-2025-15048 2025-12-23 HIGH 7.3 A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTTP Request Handler. Executing manipulation of the argument…
CVE-2025-66213 2025-12-23 N/A 0.0 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in the File Storage Directory Mount…
CVE-2025-66212 2025-12-23 N/A 0.0 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in the Dynamic Proxy Configuration Filename…
CVE-2025-66211 2025-12-23 N/A 0.0 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in PostgreSQL Init Script Filename handling…
CVE-2025-66210 2025-12-23 N/A 0.0 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in the Database Import functionality allows…
CVE-2025-66209 2025-12-23 N/A 0.0 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in the Database Backup functionality allows…
CVE-2025-15047 2025-12-23 CRITICAL 9.8 A vulnerability was found in Tenda WH450 1.0.0.18. This affects an unknown function of the file /goform/PPTPDClient of the component HTTP Request Handler. Performing manipulation of the argument…
CVE-2025-15046 2025-12-23 CRITICAL 9.8 A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function of the file /goform/PPTPClient of the component HTTP Request Handler. Such manipulation…
CVE-2025-14501 2025-12-23 HIGH 7.5 Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS…
CVE-2025-14500 2025-12-23 CRITICAL 9.8 IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IceWarp. Authentication is not required to exploit…
CVE-2025-14499 2025-12-23 HIGH 8.8 IceWarp gmaps Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of IceWarp. User interaction is required to exploit this vulnerability…
CVE-2025-14498 2025-12-23 HIGH 7.8 TradingView Desktop Electron Uncontrolled Search Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of TradingView Desktop. An attacker must first…
CVE-2025-14497 2025-12-23 HIGH 7.8 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain…
CVE-2025-14496 2025-12-23 HIGH 7.8 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain…
CVE-2025-14495 2025-12-23 HIGH 7.8 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain…
CVE-2025-14494 2025-12-23 HIGH 7.8 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain…
CVE-2025-14493 2025-12-23 HIGH 7.8 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain…
CVE-2025-14492 2025-12-23 HIGH 7.8 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain…
CVE-2025-14491 2025-12-23 HIGH 7.8 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain…
« Anterior Página 180 de 3934 Siguiente »