Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior

Críticas / altas1294▼ 196 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

359 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2016-4800	Modificada	Crítica (9.8)	6.4%	—	Eclipse Jetty	13/4/2017	17/6/2026	The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
CVE-2017-7243	Modificada	Alta (7.5)	1.8%	—	Eclipse Tinydtls	24/3/2017	17/6/2026	Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packet without pre-handshake.
CVE-2015-2080	Modificada	Alta (7.5)	75%	💥 Exploit	Fedoraproject Fedora Eclipse Jetty	7/10/2016	17/6/2026	The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
CVE-2013-0464	Modificada	Media (4.3)	1.8%	—	IBM Eclipse Help System IBM Spss Data Collection	3/6/2013	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2010-4647	Modificada	Media (4.3)	5.7%	💥 Exploit	Eclipse IDE	13/1/2011	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.
CVE-2008-7271	Modificada	Media (4.3)	1.9%	💥 Exploit	Eclipse IDE	13/1/2011	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2) the workingSet parameter in an add action…
CVE-2009-4521	Modificada	Media (4.3)	3.5%	💥 Exploit	Eclipse Birt	31/12/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT) before 2.5.0, as used in KonaKart and other products, allows remote attackers to inject arbitrary web script or HTML via the __report parameter.
CVE-2007-0581	Modificada	Alta (7.5)	3.2%	💥 Exploit	Eclipsebb	30/1/2007	16/6/2026	PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVE-1999-0459	Modificada	Media (4.6)	0.36%	—	Alpha Linux^AI Eclipse Milo^AI	1/2/1999	16/6/2026	Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.