Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior
Críticas / altas1273▼ 220 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior
380 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 67% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not required to exploit this vulnerability. The specific flaw exists within nvwsworker.exe. When parsing the boundary header of a multipart request, the process does… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobHistory Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobDefinitions Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup TimeRange method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup JobList method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup PluginList method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup ClientList method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupOptionSet Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Count method requests. The issue results from the lack of proper… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSourceDeviceSet Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUScheduleSet Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupSegment Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Get method requests. The issue results from the lack of proper… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSelectionSet Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 48% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobCountHistory Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUTransferHistory Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPolicy Get method requests. The issue results from the lack of proper… | |
| Modificada | Crítica (9.8) | 9.8% | 💥 Exploit | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Acknowledge method requests. The issue results from the lack… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus GetPlugins method requests. The issue results from the lack… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Count method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupTargetSet Get method requests. The issue results from the lack of… | |
| Modificada | Crítica (9.8) | 3.9% | — | Quest Netvault Backup | 8/2/2018 | 17/6/2026 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of GET method requests. The issue results from the lack of proper validation of… | |
| Modificada | Crítica (9.8) | 70% | 💥 Exploit | Commvault | 19/1/2018 | 17/6/2026 | A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing function inside the Commvault service does not properly validate the input of an incoming string before passing it to CreateProcess. As a result, a specially crafted message can inject… | |
| Modificada | Crítica (9.8) | 21% | 💥 Exploit | Commvault Edge | 16/12/2017 | 17/6/2026 | Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges. |