Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2738▼ 488 respecto a la semana anterior

Críticas / altas1301▼ 189 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

367 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-2704	Modificada	Media (5)	2.1%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR server and client (aka C5 EVM) before 2.8.1 send messages in cleartext, which allows remote attackers to read sensitive vulnerability information.
CVE-2006-2705	Modificada	Media (5)	2.2%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an unspecified denial of service via a large number of forged client registration messages.
CVE-2006-2709	Modificada	Media (5)	3.7%	—	Secure Elements Class 5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which allows remote attackers to (1) execute arbitrary code on a client or (2) forge messages to the server.
CVE-2006-2714	Modificada	Media (5)	1.9%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID.
CVE-2006-2708	Modificada	Media (5)	2.4%	—	Secure Elements Class 5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size for (1) EM_GET_CE_PARAMETER and (2) EM_SET_CE_PARAMETER messages, which leads to a buffer overflow (probably an over-read).
CVE-2006-2711	Modificada	Media (5)	1.9%	—	Secure Elements Class 5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key for each message session, which allows remote attackers to obtain potentially sensitive information about messages.
CVE-2006-2716	Modificada	Alta (7.5)	2.2%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server.
CVE-2006-2706	Modificada	Media (5)	2.2%	—	Secure Elements Class 5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause a denial of service via forged "session start" messages that cause AVR to connect to arbitrary hosts.
CVE-2006-2712	Modificada	Media (5)	2.6%	—	Secure Elements Class 5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the integrity of a message digest, which allows remote attackers to modify and replay messages.
CVE-2006-0762	Modificada	Media (4.6)	0.33%	—	Winability Folder Guard	18/2/2006	16/6/2026	WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application by renaming or moving the password file (FGuard.FGP), which disables the password requirement.
CVE-2005-3647	Modificada	Media (4.6)	0.33%	—	Winability Folder Guard	17/11/2005	16/6/2026	Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory.
CVE-2005-2231	Modificada	Baja (2.1)	0.36%	—	High Availability Linux Project Heartbeat	12/7/2005	16/6/2026	High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVE-2004-2495	Modificada	Alta (7.8)	2.0%	—	Code-crafters Ability Mail Server	31/12/2004	16/6/2026	The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service.
CVE-2004-2494	Modificada	Media (4.3)	1.9%	💥 Exploit	Ability Mail Server^AI	31/12/2004	16/6/2026	Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter.
CVE-2004-1626	Modificada	Media (5)	67%	💥 Exploit	Code-crafters Ability Server	22/10/2004	16/6/2026	Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command.
CVE-2004-1627	Modificada	Alta (7.5)	15%	💥 Exploit	Code-crafters Ability Server	22/10/2004	16/6/2026	Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long APPE command.
CVE-2001-0472	Modificada	Media (5)	1.3%	—	IBM High Availability Cluster Multiprocessing	27/6/2001	16/6/2026	Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely long HTTP request.