Resumen de las últimas 20 vulnerabilidades


Ayuda Ayuda

Identificador
Título
Fabricante
Fecha

CCN-CERT-2507-42697
CVE-2025-1565
Wordpress
25-04-2025
CCN-CERT-2507-42698
CVE-2025-2470
Wordpress
25-04-2025
CCN-CERT-2507-42699
CVE-2025-3912
Wordpress
25-04-2025
CCN-CERT-2504-35524
Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang/OTP SSH Server
Cisco
24-04-2025
CCN-CERT-2504-35525
MSA-25-0028: IDOR when accessing the cohorts report
Moodle
24-04-2025
CCN-CERT-2504-35526
MSA-25-0027: IDOR in messaging web service allows access to some user details
Moodle
24-04-2025
CCN-CERT-2504-35527
MSA-25-0026: AJAX section delete does not respect course_can_delete_section()
Moodle
24-04-2025
CCN-CERT-2504-35528
MSA-25-0025: Reflected XSS risk in policy tool
Moodle
24-04-2025
CCN-CERT-2504-35529
MSA-25-0024: Authenticated remote code execution risk in the Moodle LMS EQUELLA repository
Moodle
24-04-2025
CCN-CERT-2504-35530
MSA-25-0023: Authenticated remote code execution risk in the Moodle LMS Dropbox repository
Moodle
24-04-2025
CCN-CERT-2504-35531
MSA-25-0022: IDOR in web service allows users enrolled in a course to access some details of other...
Moodle
24-04-2025
CCN-CERT-2504-35532
MSA-25-0021: CSRF risk in Brickfield tools analysis request action
Moodle
24-04-2025
CCN-CERT-2504-35533
MSA-25-0020: mod_data edit/delete pages pass CSRF token in GET parameter
Moodle
24-04-2025
CCN-CERT-2504-35534
MSA-25-0019: IDOR in RSS block allows access to additional RSS feeds
Moodle
24-04-2025
CCN-CERT-2504-35535
MSA-25-0018: CSRF risk in user tours manager allows tour duplication
Moodle
24-04-2025
CCN-CERT-2504-35536
MSA-25-0017: Self enrolment available before completing second factor with MFA enabled
Moodle
24-04-2025
CCN-CERT-2504-35537
MSA-25-0016: Assignment submissions search on anonymous submissions reveals student identities
Moodle
24-04-2025
CCN-CERT-2504-35538
MSA-25-0015: Some user data available before completing second factor with MFA enabled
Moodle
24-04-2025
CCN-CERT-2504-35539
MSA-25-0014: User DoS and name disclosure risks via IDOR in MFA email factor revoke action
Moodle
24-04-2025
CCN-CERT-2504-35540
MSA-25-0013: Remote code execution risk via MimeTeX command (upstream)
Moodle
24-04-2025

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI