Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior
Críticas / altas1273▼ 220 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior
–

681 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (4)5.2%—Oracle MysqlOracle SolarisDebian LinuxMariadb+1016/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.
ModificadaMedia (5)7.1%—Oracle SolarisOracle Communications Policy ManagementOracle MysqlDebian Linux+1116/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges.
ModificadaBaja (3.5)5.0%—Suse Linux Enterprise DesktopSuse Linux Enterprise ServerSuse Linux Enterprise Software Development KITOracle Mysql+1016/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.
ModificadaMedia (5.7)9.9%—Juniper Junos SpaceOracle MysqlDebian LinuxCanonical Ubuntu Linux+1016/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling.
ModificadaMedia (4)2.4%—Oracle Communications Policy ManagementSuse Linux Enterprise Software Development KITSuse Linux Enterprise DesktopSuse Linux Enterprise Server+116/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
ModificadaBaja (3.5)4.7%—Oracle MysqlOracle SolarisDebian LinuxCanonical Ubuntu Linux+1016/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Federated.
ModificadaAlta (9.3)4.3%—OpensuseSuse Linux Enterprise ServerOracle JavafxOracle JDK+116/4/201517/6/2026
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.
ModificadaMedia (6.8)3.0%—Oracle JDKOracle JREOracle JavafxOpensuse+116/4/201517/6/2026
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0492.
ModificadaMedia (4)4.5%—Oracle MysqlDebian LinuxCanonical Ubuntu LinuxRedhat Enterprise Linux Desktop+916/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Encryption.
ModificadaMedia (4)2.3%—Suse Linux Enterprise Software Development KITNovell Suse Linux Enterprise DesktopNovell Suse Linux Enterprise ServerSuse Linux Enterprise Server+116/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-4756.
ModificadaMedia (4)2.3%—Oracle MysqlNovell Suse Linux Enterprise Software Development KITNovell Suse Linux Enterprise DesktopNovell Suse Linux Enterprise Server16/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.
ModificadaMedia (4)5.4%—Oracle Communications Policy ManagementOracle MysqlOracle SolarisDebian Linux+1116/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML.
ModificadaMedia (4)2.3%—Oracle MysqlOracle Communications Policy ManagementNovell Suse Linux Enterprise Software Development KITNovell Suse Linux Enterprise Desktop+116/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
ModificadaMedia (4)2.3%—Oracle MysqlNovell Suse Linux Enterprise Software Development KITNovell Suse Linux Enterprise DesktopNovell Suse Linux Enterprise Server16/4/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA.
ModificadaBaja (3.7)74%—Oracle Communications Application Session ControllerOracle Communications Policy ManagementOracle Http ServerOracle Integrated Lights OUT Manager Firmware+571/4/201517/6/2026
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally…
ModificadaMedia (4.6)0.58%—PHPSuse Linux Enterprise Server30/3/201517/6/2026
The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in…
ModificadaMedia (5)5.6%—Suse Linux Enterprise DesktopSuse Linux Enterprise ServerGNU GlibcCanonical Ubuntu Linux27/3/201517/6/2026
DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers…
ModificadaMedia (5)5.5%—Linux KernelOpensuseSuse Linux Enterprise DesktopSuse Linux Enterprise Real Time Extension+112/3/201517/6/2026
net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.
ModificadaAlta (10)88%💥 ExploitRedhat Enterprise LinuxSambaNovell Suse Linux Enterprise DesktopNovell Suse Linux Enterprise Server+224/2/201517/6/2026
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the…
ModificadaMedia (4)3.9%—Oracle SolarisCanonical Ubuntu LinuxDebian LinuxOracle Mysql+1021/1/201517/6/2026
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key.
ModificadaBaja (1.9)0.40%—Oracle JDKOracle JRECanonical Ubuntu LinuxSuse Linux Enterprise Server21/1/201517/6/2026
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.
ModificadaAlta (7.2)1.5%—Canonical Ubuntu LinuxDebian LinuxNovell Suse Linux Enterprise DesktopNovell Suse Linux Enterprise Server+421/1/201517/6/2026
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.
ModificadaMedia (5)5.0%—Oracle JDKOracle JREOracle JrockitCanonical Ubuntu Linux+521/1/201517/6/2026
Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.
ModificadaAlta (10)6.9%—Oracle JDKOracle JRECanonical Ubuntu LinuxDebian Linux+421/1/201517/6/2026
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
ModificadaMedia (5)4.2%—Canonical Ubuntu LinuxNovell Suse Linux Enterprise DesktopNovell Suse Linux Enterprise ServerOpensuse+221/1/201517/6/2026
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.