Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2729▼ 513 respecto a la semana anterior

Críticas / altas1298▼ 212 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior

281 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2015-4981	Modificada	Baja (2.1)	0.38%	—	IBM General Parallel File System IBM Spectrum Scale	26/10/2015	17/6/2026	IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain sensitive information from system memory via unspecified vectors.
CVE-2015-4974	Modificada	Alta (7.2)	0.58%	—	IBM General Parallel File System IBM Spectrum Scale	26/10/2015	17/6/2026	IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors.
CVE-2015-2828	Modificada	Alta (9)	3.2%	—	Broadcom Spectrum	8/4/2015	17/6/2026	CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obtain administrative privileges via crafted object data.
CVE-2015-2827	Modificada	Baja (3.5)	1.9%	—	Broadcom Spectrum	8/4/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in CA Spectrum 9.2.x and 9.3.x before 9.3 H02 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2005-4860	Modificada	Alta (7.8)	0.20%	—	Spectrumcu Cash Receipting System	31/12/2005	16/6/2026	Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password.
CVE-1999-1019	Modificada	Alta (7.2)	0.35%	—	Cabletron Spectrum Enterprise Manager	23/6/1999	16/6/2026	SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise.