Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2736▼ 485 respecto a la semana anterior

Críticas / altas1304▼ 186 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior

357 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2013-3061	Modificada	Media (6.5)	1.6%	—	SAP ERP Central Component SAP Healthcare Industry Solution	1/5/2013	16/6/2026	The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors.
CVE-2012-2000	Modificada	Alta (7.5)	8.2%	—	HP System Health Application AND Command Line Utilities	2/5/2012	16/6/2026	Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execute arbitrary code via unknown vectors.
CVE-2011-1899	Modificada	Media (4.3)	1.3%	—	CA Ehealth	16/5/2011	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVE-2010-0640	Modificada	Baja (2.6)	1.0%	—	CA Ehealth Performance Manager	24/2/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted request.
CVE-2009-1161	Modificada	Alta (10)	13%	—	Ciscoworks Common Services Ciscoworks Health AND Utilization Monitor Ciscoworks LAN Management Solution Ciscoworks QOS Policy Manager+6	21/5/2009	16/6/2026	Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows…
CVE-2001-0134	Modificada	Alta (10)	4.0%	—	Compaq Armada Insight Manager Compaq Enterprise Volume Manager-command Scripter Compaq Foundation Agents Compaq Insight Management Agent+11	12/3/2001	16/6/2026	Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.
CVE-2000-0294	Modificada	Alta (7.2)	0.40%	—	JIM Housley Healthd	10/4/2000	16/6/2026	Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.