Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior
Críticas / altas1294▼ 234 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
787 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.1) | 10% | — | Apache TomcatNetapp Oncommand InsightNetapp Oncommand ShiftNetapp Snap Creator Framework+11 | 10/8/2017 | 17/6/2026 | In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications. | |
| Modificada | Media (5.9) | 8.0% | — | Apache TomcatCanonical Ubuntu LinuxDebian LinuxRedhat Jboss Enterprise WEB Server+11 | 10/8/2017 | 17/6/2026 | The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default… | |
| Modificada | Baja (3.1) | 1.9% | — | Oracle MysqlDebian LinuxRedhat OpenstackRedhat Enterprise Linux Desktop+6 | 8/8/2017 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise… | |
| Modificada | Media (4.3) | 2.1% | — | Oracle MysqlMariadbDebian LinuxRedhat Openstack+6 | 8/8/2017 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise… | |
| Modificada | Media (6.5) | 2.9% | — | Oracle JDKOracle JREOracle JrockitDebian Linux+23 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via… | |
| Modificada | Media (6.8) | 2.6% | — | Oracle JDKOracle JREOracle JrockitPhoenixcontact FL Mguard DM+23 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via… | |
| Modificada | Baja (3.1) | 2.2% | — | Oracle JDKOracle JREDebian LinuxNetapp Active IQ Unified Manager+21 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to… | |
| Modificada | Media (5.9) | 2.6% | — | Oracle JDKOracle JREOracle JrockitDebian Linux+23 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via… | |
| Modificada | Alta (8.3) | 3.4% | — | Oracle JDKOracle JREOracle JrockitPhoenixcontact FL Mguard DM+24 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via… | |
| Modificada | Alta (7.5) | 2.7% | — | Oracle JDKOracle JREOracle JrockitDebian Linux+24 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via… | |
| Modificada | Crítica (9.6) | 2.1% | — | Oracle JDKOracle JREDebian LinuxRedhat Enterprise Linux Desktop+21 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE,… | |
| Modificada | Crítica (9.6) | 2.4% | — | Oracle JDKOracle JREDebian LinuxRedhat Satellite+22 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human… | |
| Modificada | Media (5.3) | 3.1% | — | Oracle JDKOracle JREOracle JrockitDebian Linux+23 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access… | |
| Modificada | Media (5.3) | 3.1% | — | Oracle JDKOracle JREOracle JrockitDebian Linux+24 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access… | |
| Modificada | Crítica (9.6) | 2.6% | — | Oracle JDKOracle JREDebian LinuxRedhat Satellite+22 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise… | |
| Modificada | Media (4.3) | 1.9% | — | Oracle JDKOracle JRERedhat SatelliteRedhat Enterprise Linux Desktop+19 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require… | |
| Modificada | Crítica (9) | 3.0% | — | Oracle JDKOracle JREDebian LinuxPhoenixcontact FL Mguard DM+23 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise… | |
| Modificada | Crítica (9.6) | 2.6% | — | Oracle JDKOracle JREDebian LinuxRedhat Satellite+22 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise… | |
| Modificada | Crítica (9.6) | 2.6% | — | Oracle JDKOracle JREDebian LinuxRedhat Satellite+22 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise… | |
| Modificada | Crítica (9.6) | 2.6% | — | Oracle JDKOracle JREDebian LinuxNetapp Active IQ Unified Manager+21 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise… | |
| Modificada | Crítica (9.6) | 2.4% | — | Oracle JDKOracle JREDebian LinuxRedhat Satellite+22 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human… | |
| Modificada | Crítica (9.6) | 2.6% | — | Oracle JDKOracle JREDebian LinuxRedhat Satellite+22 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to… | |
| Modificada | Alta (8.1) | 2.4% | — | Oracle JDKOracle JREDebian LinuxRedhat Satellite+23 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can… | |
| Modificada | Alta (8.3) | 3.1% | — | Oracle JDKOracle JREDebian LinuxRedhat Enterprise Linux Desktop+21 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to… | |
| Modificada | Alta (7.5) | 3.3% | — | Oracle JDKOracle JREDebian LinuxRedhat Satellite+22 | 8/8/2017 | 17/6/2026 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require… |