Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

Borrar filtros
CVE ID Publicado Severidad CVSS Descripción
CVE-2025-48499 2025-08-04 MEDIUM 5.3 Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP (Internet Printing Protocol) or LPD (Line Printer Daemon) packet may cause a denial-of-service (DoS) condition…
CVE-2025-54962 2025-08-04 MEDIUM 6.4 /edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such as .html or .svg), and these are then publicly accessible under…
CVE-2025-20698 2025-08-04 MEDIUM 6.7 In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious…
CVE-2025-20696 2025-08-04 MEDIUM 6.8 In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has…
CVE-2025-54956 2025-08-03 LOW 3.2 The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request.
CVE-2025-8513 2025-08-03 MEDIUM 5.3 A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component…
CVE-2025-8512 2025-08-03 MEDIUM 5.3 A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issue affects some unknown processing of the file…
CVE-2025-8511 2025-08-03 LOW 3.5 A vulnerability classified as problematic was found in Portabilis i-Diario 1.5.0. This vulnerability affects unknown code of the file /diario-de-observacoes/ of the component Observações. The manipulation of the…
CVE-2025-8510 2025-08-03 LOW 3.5 A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. This affects the function Gerar of the file ieducar/intranet/educar_matricula_lst.php. The manipulation of the argument ref_cod_aluno leads…
CVE-2025-8509 2025-08-03 LOW 3.5 A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educar_servidor_cad.php. The manipulation…
CVE-2025-8508 2025-08-03 LOW 3.5 A vulnerability was found in Portabilis i-Educar 2.9. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /intranet/educar_avaliacao_desempenho_cad.php. The manipulation…
CVE-2024-51775 2025-08-03 N/A 0.0 Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs. …
CVE-2025-8507 2025-08-03 LOW 3.5 A vulnerability was found in Portabilis i-Educar 2.9. It has been classified as problematic. Affected is an unknown function of the file /intranet/educar_funcao_lst.php. The manipulation of the argument…
CVE-2024-52279 2025-08-03 N/A 0.0 Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not account for URL encoded input. This issue affects Apache Zeppelin: from…
CVE-2024-41177 2025-08-03 N/A 0.0 Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin. This issue affects Apache Zeppelin: before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue.
CVE-2025-8506 2025-08-03 LOW 3.5 A vulnerability was found in 495300897 wx-shop up to de1b66331368695779cfc6e4d11a64caddf8716e and classified as problematic. This issue affects some unknown processing of the file /user/editUI. The manipulation leads to…
CVE-2025-8505 2025-08-03 MEDIUM 4.3 A vulnerability has been found in 495300897 wx-shop up to de1b66331368695779cfc6e4d11a64caddf8716e and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The…
CVE-2025-8504 2025-08-03 MEDIUM 6.3 A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument…
CVE-2025-8503 2025-08-03 HIGH 7.3 A vulnerability, which was classified as critical, has been found in code-projects Online Medicine Guide 1.0. Affected by this issue is some unknown functionality of the file /adaddmed.php.…
CVE-2025-8502 2025-08-03 HIGH 7.3 A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerability is an unknown functionality of the file /changepass.php. The manipulation of…
CVE-2025-8501 2025-08-03 LOW 3.5 A vulnerability classified as problematic has been found in code-projects Human Resource Integrated System 1.0. Affected is an unknown function of the file /insert-and-view/action.php. The manipulation of the…
CVE-2025-8500 2025-08-03 MEDIUM 6.3 A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insert-and-view/action.php. The…
CVE-2025-8499 2025-08-03 HIGH 7.3 A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cusfindambulence2.php. The manipulation of…
CVE-2025-8498 2025-08-03 HIGH 7.3 A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been classified as critical. This affects an unknown part of the file /cart/index.php. The manipulation of…
CVE-2025-8497 2025-08-03 HIGH 7.3 A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /cusfindphar2.php. The manipulation…
CVE-2025-8496 2025-08-03 HIGH 7.3 A vulnerability has been found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /viewform.php. The…
CVE-2025-52133 2025-08-03 MEDIUM 6.4 The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import.
CVE-2025-52132 2025-08-03 MEDIUM 6.4 The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page.
CVE-2025-52131 2025-08-03 MEDIUM 6.4 The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field.
CVE-2025-8495 2025-08-03 HIGH 7.3 A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /admin/edit_admin_query.php. The manipulation of…
CVE-2025-54351 2025-08-03 HIGH 8.9 In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).
CVE-2025-54350 2025-08-03 LOW 3.7 In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt.
CVE-2025-54349 2025-08-03 MEDIUM 6.5 In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.
CVE-2025-8494 2025-08-03 HIGH 7.3 A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /admin/delete_student.php. The…
CVE-2025-54955 2025-08-03 HIGH 8.1 OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this,…
CVE-2025-8493 2025-08-02 HIGH 7.3 A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_student_query.php. The manipulation of the argument…
CVE-2025-23290 2025-08-02 LOW 2.5 NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influenced by work in other VMs.…
CVE-2025-23285 2025-08-02 MEDIUM 5.5 NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead…
CVE-2025-23284 2025-08-02 HIGH 7.8 NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack buffer overflow. A successful exploit of this vulnerability might…
CVE-2023-32255 2025-08-02 MEDIUM 5.3 A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message…
CVE-2023-32253 2025-08-02 MEDIUM 5.9 A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a denial of service.
CVE-2025-23288 2025-08-02 LOW 3.3 NVIDIA GPU Display Driver for Windows contains a vulnerability  where an attacker may cause an exposure of sensitive system information with local unprivileged system access. A successful exploit…
CVE-2025-23287 2025-08-02 LOW 3.3 NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access sensitive system-level information. A successful exploit of this vulnerability may lead to Information disclosure.
CVE-2025-23286 2025-08-02 MEDIUM 4.4 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information…
CVE-2025-23283 2025-08-02 HIGH 7.8 NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this…
CVE-2025-23281 2025-08-02 HIGH 7.0 NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race condition might be able to trigger a…
CVE-2025-23279 2025-08-02 HIGH 7.0 NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might…
CVE-2025-23278 2025-08-02 HIGH 7.1 NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful…
CVE-2025-23277 2025-08-02 HIGH 7.3 NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases.…
CVE-2025-23276 2025-08-02 HIGH 7.8 NVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate privileges. A successful exploit of this vulnerability may lead to escalation of privileges,…
« Anterior Página 946 de 4306 Siguiente »