Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

CVE ID Publicado Severidad CVSS Descripción
CVE-2022-41210 2022-10-11 MEDIUM 5.2 SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number generator program which makes…
CVE-2022-41376 2022-10-11 MEDIUM 6.1 Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Javascript function.
CVE-2022-41202 2022-10-11 HIGH 7.8 Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, vds.x3d) file received…
CVE-2022-41189 2022-10-11 HIGH 7.8 Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted…
CVE-2022-32175 2022-10-11 MEDIUM 5.4 In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An…
CVE-2025-27192 2025-04-08 LOW 2.7 Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could…
CVE-2023-42113 2024-05-03 MEDIUM 5.5 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on…
CVE-2023-42112 2024-05-03 MEDIUM 5.5 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on…
CVE-2023-42111 2024-05-03 HIGH 7.8 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-42110 2024-05-03 MEDIUM 5.5 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on…
CVE-2023-39485 2024-05-03 HIGH 7.8 PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-39484 2024-05-03 MEDIUM 5.5 PDF-XChange Editor PDF File Parsing Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on…
CVE-2023-39483 2024-05-03 MEDIUM 5.5 PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on…
CVE-2023-32161 2024-05-03 HIGH 7.8 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-32160 2024-05-03 HIGH 7.8 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-32159 2024-05-03 HIGH 7.8 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-32158 2024-05-03 HIGH 7.8 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-27348 2024-05-03 HIGH 7.8 PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2023-27345 2024-05-03 HIGH 7.8 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-27341 2024-05-03 HIGH 7.8 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-27342 2024-05-03 HIGH 7.8 PDF-XChange Editor EMF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2023-27343 2024-05-03 HIGH 7.8 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-27340 2024-05-03 HIGH 7.8 PDF-XChange Editor PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-27339 2024-05-03 HIGH 7.8 PDF-XChange Editor PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-27344 2024-05-03 HIGH 7.8 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-39487 2024-05-03 MEDIUM 5.5 PDF-XChange Editor util Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations…
CVE-2023-39488 2024-05-03 HIGH 7.8 PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2023-39489 2024-05-03 HIGH 7.8 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2023-40473 2024-05-03 MEDIUM 5.5 PDF-XChange Editor Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected…
CVE-2023-39486 2024-05-03 HIGH 7.8 PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
CVE-2025-0782 2025-05-02 N/A 0.0 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-7211 2024-08-01 MEDIUM 4.7 The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker…
CVE-2023-5964 2023-11-06 CRITICAL 9.9 The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate…
CVE-2023-45163 2023-11-06 CRITICAL 9.9 The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate…
CVE-2023-45161 2023-11-06 CRITICAL 9.9 The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate…
CVE-2023-45162 2023-10-13 CRITICAL 9.9 Affected 1E Platform versions have a Blind SQL Injection vulnerability that can lead to arbitrary code execution.  Application of the…
CVE-2023-45160 2023-10-05 HIGH 8.8 In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute…
CVE-2023-45159 2023-10-05 HIGH 8.4 1E Client installer can perform arbitrary file deletion on protected files.   A non-privileged user could provide a symbolic link or…
CVE-2022-29623 2022-05-16 HIGH 7.8 An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code…
CVE-2023-6783 2025-05-15 MEDIUM 4.8 The WolfNet IDX for WordPress plugin through 1.19.1 does not sanitise and escape some of its settings, which could allow…
CVE-2025-1706 2025-05-17 HIGH 7.5 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.
CVE-2024-47893 2025-05-17 MEDIUM 6.5 Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to read and/or…
CVE-2022-42044 2022-10-11 CRITICAL 9.8 The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The…
CVE-2022-42235 2022-10-11 MEDIUM 5.4 A Stored XSS issue in Student Clearance System v.1.0 allows the injection of arbitrary JavaScript in the Student registration form.
CVE-2022-42230 2022-10-11 HIGH 7.2 Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manage_user&id=.
CVE-2022-42229 2022-10-11 HIGH 8.8 Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.
CVE-2022-42043 2022-10-11 CRITICAL 9.8 The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The…
CVE-2022-42042 2022-10-11 CRITICAL 9.8 The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The…
CVE-2022-42041 2022-10-11 CRITICAL 9.8 The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The…
CVE-2022-42040 2022-10-11 CRITICAL 9.8 The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The…
« Anterior Página 411 de 3522 Siguiente »