Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2739▼ 510 respecto a la semana anterior
Críticas / altas1303▼ 212 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior
383 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4) | 1.3% | — | Hitachi Groupmax World Wide WEBHitachi Groupmax World Wide WEB Desktop | 31/12/2004 | 16/6/2026 | Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the template name parameter. | |
| Modificada | Media (4.3) | 1.2% | — | Hitachi WEB Page GeneratorHitachi WEB Page Generator Enterprise | 31/12/2004 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. | |
| Modificada | Media (5) | 1.8% | — | Hitachi JP1 P-1b41-9461Hitachi JP1 P-1b41-9471Hitachi JP1 P-1j41-9471 | 31/12/2004 | 16/6/2026 | Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7 allows remote attackers to cause a denial of service (daemon halt) via a port scan involving reset packets. | |
| Modificada | Alta (10) | 1.9% | — | Hitachi JP1 P-1b41-9461Hitachi JP1 P-1b41-9471Hitachi JP1 P-1j41-9471 | 31/12/2004 | 16/6/2026 | Unknown vulnerability in Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7, when running on HP-UX in trusted mode, allows attackers to bypass authentication and gain administrator rights. | |
| Modificada | Media (5) | 1.4% | — | Hitachi WEB Page GeneratorAIHitachi WEB Page Generator EnterpriseAI | 31/12/2004 | 16/6/2026 | Unspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to determine internal directory structures via unknown attack vectors. | |
| Modificada | Alta (7.5) | 3.4% | — | Hitachi Cosminexus EnterpriseHitachi Cosminexus ServerMacromedia ColdfusionMacromedia Jrun | 31/12/2004 | 16/6/2026 | JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session. | |
| Modificada | Media (5) | 4.1% | — | Hitachi Cosminexus EnterpriseHitachi Cosminexus ServerMacromedia ColdfusionMacromedia Jrun | 5/10/2004 | 16/6/2026 | The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm". | |
| Modificada | Media (5) | 8.6% | — | Hitachi Groupmax Mail - Security OptionHitachi PKI Runtime Library | 1/12/2003 | 16/6/2026 | Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the… |