Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▼ 480 respecto a la semana anterior

Críticas / altas1308▼ 182 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior

354 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-1161	Modificada	Alta (10)	13%	—	Ciscoworks Common Services Ciscoworks Health AND Utilization Monitor Ciscoworks LAN Management Solution Ciscoworks QOS Policy Manager+6	21/5/2009	16/6/2026	Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows…
CVE-2009-0575	Modificada	Media (4.3)	1.1%	—	Drupal Views Bulk Operations	13/2/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function in views_bulk_operations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to…
CVE-2007-3872	Modificada	Media (6.8)	30%	💥 Exploit	HP Openview Operations HP Shared Trace Service	9/8/2007	16/6/2026	Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.
CVE-2004-1500	Modificada	Baja (2.1)	1.9%	💥 Exploit	Freeform Interactive Purge Jihad Monolith Productions Alien Versus Predator Monolith Productions Blood Monolith Productions Contract Jack+7	31/12/2004	16/6/2026	Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.