Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

Borrar filtros
CVE ID Publicado Severidad CVSS Descripción
CVE-2025-14519 2025-12-11 LOW 3.5 A security flaw has been discovered in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. This issue affects some unknown processing of the file /admin/index.php/advtext/add of the component advtext Module. The…
CVE-2025-14518 2025-12-11 MEDIUM 6.3 A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of…
CVE-2024-58285 2025-12-10 N/A 0.0 Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that…
CVE-2024-58284 2025-12-10 N/A 0.0 PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and…
CVE-2025-14265 2025-12-11 CRITICAL 9.1 In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks within the extension subsystem could allow the installation and execution of untrusted or arbitrary extensions by…
CVE-2025-13124 2025-12-11 HIGH 7.6 Authorization Bypass Through User-Controlled Key vulnerability in Netiket Information Technologies Ltd. Co. ApplyLogic allows Exploitation of Trusted Identifiers.This issue affects ApplyLogic: through 01.12.2025.
CVE-2024-40593 2025-12-11 MEDIUM 6.0 A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager…
CVE-2025-14517 2025-12-11 MEDIUM 5.3 A vulnerability was determined in Yalantis uCrop 2.2.11. This affects the function UCropActivity  of the file AndroidManifest.xml. Executing manipulation can lead to improper export of android application components.…
CVE-2025-14516 2025-12-11 MEDIUM 6.3 A vulnerability was found in Yalantis uCrop 2.2.11. Affected by this issue is the function downloadFile of the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler. Performing manipulation results…
CVE-2025-14523 2025-12-11 HIGH 8.2 A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the…
CVE-2025-14515 2025-12-11 HIGH 7.3 A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_unit.php. Such manipulation of the argument…
CVE-2025-13003 2025-12-11 HIGH 7.6 Authorization Bypass Through User-Controlled Key vulnerability in Aksis Computer Services and Consulting Inc. AxOnboard allows Exploitation of Trusted Identifiers.This issue affects AxOnboard: from 3.2.0 before 3.3.0.
CVE-2025-64995 2025-12-11 MEDIUM 6.5 A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4. Improper protection of the execution path on the local…
CVE-2025-64994 2025-12-11 MEDIUM 6.5 A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-SetWorkRate instruction prior V17.1. The improper handling of executable search paths could allow…
CVE-2025-64993 2025-12-11 MEDIUM 6.8 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject…
CVE-2025-64992 2025-12-11 MEDIUM 6.8 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-PauseNomadJobQueue instruction prior V25. Improper input validation, allowing authenticated attackers with Actioner privileges…
CVE-2025-64991 2025-12-11 MEDIUM 6.8 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior V15. Improper input validation, allowing authenticated attackers with Actioner privileges…
CVE-2025-64990 2025-12-11 MEDIUM 6.8 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-LogoffUser instruction prior V21.1. Improper input validation, allowing authenticated attackers with Actioner privileges…
CVE-2025-64989 2025-12-11 HIGH 7.2 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-FindFileBySizeAndHash instruction prior V21.1. Improper input validation, allowing authenticated attackers with Actioner privileges…
CVE-2025-64988 2025-12-11 HIGH 7.2 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-GetCmContentLocations instruction prior V19.2. Improper input validation, allowing authenticated attackers with Actioner privileges…
CVE-2025-64987 2025-12-11 HIGH 7.2 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-CheckSimpleIoC instruction. Improper input validation, allowing authenticated attackers with Actioner privileges to inject…
CVE-2025-64986 2025-12-11 HIGH 7.2 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21. Improper input validation, allowing authenticated attackers with Actioner privileges…
CVE-2025-46266 2025-12-11 MEDIUM 4.3 A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting…
CVE-2025-44016 2025-12-11 HIGH 8.8 A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via…
CVE-2025-14514 2025-12-11 HIGH 7.3 A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/add_distributor.php. This manipulation of the argument txtDistributorAddress causes sql…
CVE-2025-12687 2025-12-11 MEDIUM 6.5 A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service…
CVE-2025-64701 2025-12-11 HIGH 7.8 QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a Windows system with the affected product to…
CVE-2025-12734 2025-12-11 LOW 3.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated…
CVE-2025-12029 2025-12-11 HIGH 8.0 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have, under certain circumstances,…
CVE-2025-67738 2025-12-11 HIGH 8.5 squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if Webmin's Squid module and its Cache Manager feature are available, and an untrusted party…
CVE-2025-14512 2025-12-11 MEDIUM 6.5 A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when…
CVE-2025-8405 2025-12-11 HIGH 8.7 GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an…
CVE-2025-4097 2025-12-11 MEDIUM 6.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated…
CVE-2025-11984 2025-12-11 MEDIUM 6.8 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated…
CVE-2025-11247 2025-12-11 MEDIUM 4.3 GitLab has remediated an issue in GitLab EE affecting all versions from 13.2 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated…
CVE-2025-9436 2025-12-11 MEDIUM 6.4 The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `trustindex` shortcode in all versions up to, and including, 13.2.1 due…
CVE-2025-67694 2025-12-11 N/A 0.0 Rejected reason: Not used
CVE-2025-67693 2025-12-11 N/A 0.0 Rejected reason: Not used
CVE-2025-67692 2025-12-11 N/A 0.0 Rejected reason: Not used
CVE-2025-67691 2025-12-11 N/A 0.0 Rejected reason: Not used
CVE-2025-67690 2025-12-11 N/A 0.0 Rejected reason: Not used
CVE-2025-67689 2025-12-11 N/A 0.0 Rejected reason: Not used
CVE-2025-67688 2025-12-11 N/A 0.0 Rejected reason: Not used
CVE-2025-67687 2025-12-11 N/A 0.0 Rejected reason: Not used
CVE-2025-67686 2025-12-11 N/A 0.0 Rejected reason: Not used
CVE-2025-14157 2025-12-11 MEDIUM 6.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 6.3 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated…
CVE-2025-13978 2025-12-11 MEDIUM 4.3 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated…
CVE-2025-12716 2025-12-11 HIGH 8.7 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that, under certain conditions could have…
CVE-2025-12562 2025-12-11 HIGH 7.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an unauthenticated…
CVE-2025-10163 2025-12-11 MEDIUM 6.5 The List category posts plugin for WordPress is vulnerable to time-based SQL Injection via the ‘starting_with’ parameter of the catlist shortcode in all versions up to, and including,…
« Anterior Página 575 de 4286 Siguiente »