Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2741▼ 485 respecto a la semana anterior
Críticas / altas1305▼ 185 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior
618 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.8) | 1.4% | — | Microsoft SQL 2016 Azure Connect Feature PackMicrosoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019+1 | 10/9/2024 | 10/8/2026 | Microsoft SQL Server Elevation of Privilege Vulnerability | |
| Analizada | Alta (8.8) | 1.6% | — | Microsoft SQL 2016 Azure Connect Feature PackMicrosoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019+1 | 10/9/2024 | 10/8/2026 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| Analizada | Alta (8.8) | 1.6% | — | Microsoft SQL 2016 Azure Connect Feature PackMicrosoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019+1 | 10/9/2024 | 10/8/2026 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| Analizada | Alta (8.8) | 1.6% | — | Microsoft SQL 2016 Azure Connect Feature PackMicrosoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019+1 | 10/9/2024 | 10/8/2026 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| Analizada | Media (4.3) | 1.7% | — | Microsoft SQL 2016 Azure Connect Feature PackMicrosoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019+1 | 10/9/2024 | 10/8/2026 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | |
| Analizada | Alta (8.8) | 1.6% | — | Microsoft SQL 2016 Azure Connect Feature PackMicrosoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019+1 | 10/9/2024 | 10/8/2026 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| Analizada | Alta (8.8) | 1.6% | — | Microsoft SQL 2016 Azure Connect Feature PackMicrosoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019+1 | 10/9/2024 | 10/8/2026 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| Analizada | Alta (8.8) | 1.6% | — | Microsoft SQL 2016 Azure Connect Feature PackMicrosoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019+1 | 10/9/2024 | 10/8/2026 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | |
| Analizada | Media (5.4) | 0.26% | — | Azurecurve Toggle Show/hide | 29/8/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in azurecurve azurecurve Toggle Show/Hide allows Stored XSS.This issue affects azurecurve Toggle Show/Hide: from n/a through 2.1.3. | |
| Analizada | Alta (8.8) | 0.79% | — | Microsoft Azure Managed Instance FOR Apache Cassandra | 20/8/2024 | 17/6/2026 | An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network. | |
| Analizada | Alta (7) | 0.65% | — | Microsoft Azure Stack HUB | 13/8/2024 | 17/6/2026 | Azure Stack Hub Elevation of Privilege Vulnerability | |
| Analizada | Alta (7.8) | 0.51% | — | Microsoft Azure Cyclecloud | 13/8/2024 | 17/6/2026 | Azure CycleCloud Remote Code Execution Vulnerability | |
| Analizada | Alta (7.8) | 0.51% | — | Microsoft Azure Connected Machine Agent | 13/8/2024 | 17/6/2026 | Azure Connected Machine Agent Elevation of Privilege Vulnerability | |
| Analizada | Alta (7) | 0.43% | — | Microsoft Azure IOT HUB Device Client SDK | 13/8/2024 | 17/6/2026 | Azure IoT SDK Remote Code Execution Vulnerability | |
| Analizada | Alta (7) | 0.48% | — | Microsoft Azure IOT HUB Device Client SDK | 13/8/2024 | 17/6/2026 | Azure IoT SDK Remote Code Execution Vulnerability | |
| Analizada | Alta (8.8) | 1.8% | — | Microsoft Azure Health BOT | 13/8/2024 | 17/6/2026 | An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network. | |
| Analizada | Crítica (9.3) | 1.2% | — | Microsoft Azure Stack HUB | 13/8/2024 | 17/6/2026 | Azure Stack Hub Spoofing Vulnerability | |
| Analizada | Alta (7.8) | 0.63% | — | Microsoft Azure Connected Machine Agent | 13/8/2024 | 17/6/2026 | Azure Connected Machine Agent Elevation of Privilege Vulnerability | |
| Aplazada | Alta (7.5) | 0.38% | — | Azuresoft MyhorusAI | 2/8/2024 | 17/6/2026 | SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors. | |
| Modificada | Alta (8.8) | 1.6% | — | Microsoft Azure Cyclecloud | 9/7/2024 | 17/6/2026 | Azure CycleCloud Elevation of Privilege Vulnerability | |
| Modificada | Media (6.4) | 0.61% | — | Microsoft Azure Kinect Software Development KIT | 9/7/2024 | 17/6/2026 | Azure Kinect SDK Remote Code Execution Vulnerability | |
| Modificada | Alta (7.6) | 1.6% | — | Microsoft Azure Devops Server | 9/7/2024 | 17/6/2026 | Azure DevOps Server Spoofing Vulnerability | |
| Modificada | Alta (7.6) | 1.6% | — | Microsoft Azure Devops Server | 9/7/2024 | 17/6/2026 | Azure DevOps Server Spoofing Vulnerability | |
| Modificada | Alta (7.8) | 0.71% | — | Microsoft Azure Network Watcher Agent | 9/7/2024 | 17/6/2026 | Azure Network Watcher VM Extension Elevation of Privilege Vulnerability | |
| Modificada | Alta (8.1) | 1.1% | — | Microsoft Azure Data Science Virtual Machine | 11/6/2024 | 20/7/2026 | Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability |