Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

CVE ID Publicado Severidad CVSS Descripción
CVE-2025-24471 2025-06-10 MEDIUM 6.5 An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified…
CVE-2025-24069 2025-06-10 MEDIUM 5.5 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-24068 2025-06-10 MEDIUM 5.5 Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-24065 2025-06-10 MEDIUM 5.5 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-22256 2025-06-10 MEDIUM 6.3 A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1.0.0…
CVE-2025-22254 2025-06-10 MEDIUM 6.6 An Improper Privilege Management vulnerability [CWE-269] affecting Fortinet FortiOS version 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0…
CVE-2025-22251 2025-06-10 LOW 3.1 An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions,…
CVE-2024-57189 2025-06-10 N/A 0.0 In Erxes
CVE-2024-57186 2025-06-10 N/A 0.0 In Erxes
CVE-2024-54019 2025-06-10 MEDIUM 4.8 A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all…
CVE-2024-50568 2025-06-10 MEDIUM 5.9 A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14…
CVE-2024-50562 2025-06-10 MEDIUM 4.8 An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0…
CVE-2024-45329 2025-06-10 MEDIUM 4.3 A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8…
CVE-2024-43706 2025-06-10 HIGH 7.6 Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint.
CVE-2024-32119 2025-06-10 MEDIUM 4.8 An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge…
CVE-2023-48786 2025-06-10 MEDIUM 4.3 A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated…
CVE-2023-29184 2025-06-10 LOW 3.2 An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before…
CVE-2023-20599 2025-06-10 HIGH 7.9 Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP)…
CVE-2025-5952 2025-06-10 HIGH 7.3 A vulnerability, which was classified as critical, has been found in Zend.To up to 6.10-6 Beta. This issue affects the…
CVE-2025-5910 2025-06-10 HIGH 8.8 A vulnerability has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is…
CVE-2025-5909 2025-06-10 HIGH 8.8 A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. Affected is an unknown function…
CVE-2025-5908 2025-06-10 HIGH 8.8 A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This issue affects some…
CVE-2025-5907 2025-06-10 HIGH 8.8 A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This vulnerability affects unknown code of the…
CVE-2025-5914 2025-06-09 LOW 3.9 A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow…
CVE-2025-5906 2025-06-10 HIGH 7.3 A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the…
CVE-2025-5905 2025-06-10 HIGH 8.8 A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the…
CVE-2025-5904 2025-06-10 HIGH 8.8 A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the…
CVE-2025-5903 2025-06-10 HIGH 8.8 A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of…
CVE-2025-5902 2025-06-09 HIGH 8.8 A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the…
CVE-2025-5901 2025-06-09 HIGH 8.8 A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This vulnerability affects the function UploadCustomModule of…
CVE-2025-5900 2025-06-09 MEDIUM 4.3 A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13. This affects an unknown part. The manipulation…
CVE-2025-5899 2025-06-09 MEDIUM 5.3 A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function parse_variables_option of…
CVE-2025-5898 2025-06-09 MEDIUM 5.3 A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function parse_variables_option of the file…
CVE-2025-5897 2025-06-09 MEDIUM 4.3 A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the…
CVE-2025-5896 2025-06-09 MEDIUM 4.3 A vulnerability was found in tarojs taro up to 4.1.1. It has been declared as problematic. This vulnerability affects unknown…
CVE-2025-5895 2025-06-09 MEDIUM 4.3 A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataUri of the…
CVE-2025-4801 2025-06-10 N/A 0.0 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All…
CVE-2025-4678 2025-06-10 N/A 0.0 Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection. This issue affects Pandora ITSM 5.0.105.
CVE-2025-4653 2025-06-10 N/A 0.0 Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM…
CVE-2025-49143 2025-06-10 N/A 0.0 Nautobot is a Network Source of Truth and Network Automation Platform. Prior to v2.4.10 and v1.6.32 , files uploaded by…
CVE-2025-49142 2025-06-10 N/A 0.0 Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or…
CVE-2025-49141 2025-06-09 HIGH 8.5 HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite`…
CVE-2025-49139 2025-06-09 MEDIUM 5.3 HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the…
CVE-2025-48937 2025-06-10 MEDIUM 4.9 matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. matrix-sdk-crypto since version 0.8.0 and up to 0.11.0 does…
CVE-2025-48879 2025-06-10 MEDIUM 6.5 OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken…
CVE-2025-48067 2025-06-10 MEDIUM 5.4 OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.1 contain a vulnerability…
CVE-2025-47110 2025-06-10 CRITICAL 9.1 Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that…
CVE-2025-49138 2025-06-09 MEDIUM 6.5 HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticated…
CVE-2025-49137 2025-06-09 HIGH 8.5 HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application…
CVE-2025-44043 2025-06-10 N/A 0.0 Keyoti SearchUnit prior to 9.0.0. is vulnerable to Server-Side Request Forgery (SSRF) in /Keyoti_SearchEngine_Web_Common/SearchService.svc/GetResults and /Keyoti_SearchEngine_Web_Common/SearchService.svc/GetLocationAndContentCategories. An attacker can specify…
« Anterior Página 279 de 3504 Siguiente »