Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior
Críticas / altas1294▼ 234 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
1437 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Baja (3.9) | 0.39% | — | Oracle Solaris | 23/7/2019 | 17/6/2026 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zones). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.… | |
| Modificada | Alta (7.3) | 0.51% | — | Oracle Solaris | 23/7/2019 | 17/6/2026 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Filesystem). Supported versions that are affected are 11.4 and 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle… | |
| Modificada | Media (6.3) | 0.39% | — | Oracle Solaris | 23/7/2019 | 17/6/2026 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Open Fabrics Tools). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful… | |
| Modificada | Media (4.2) | 0.89% | — | Oracle Solaris | 23/7/2019 | 17/6/2026 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Automount). Supported versions that are affected are 11.4 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via NFS to compromise Oracle Solaris. Successful attacks require… | |
| Modificada | Media (5.3) | 1.7% | — | BD Alaris Gateway Workstation Firmware | 13/6/2019 | 17/6/2026 | BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and configuration information of… | |
| Modificada | Crítica (10) | 2.5% | — | BD Alaris Gateway Workstation FirmwareBD Alaris GS Syringe Pump FirmwareBD Alaris GH Syringe Pump FirmwareBD Alaris CC Syringe Pump Firmware+1 | 13/6/2019 | 17/6/2026 | BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13, This does not impact the latest firmware Versions 1.3.2 and 1.6.1, Additionally, the following products using software Version 2.3.6 and below, Alaris GS, Alaris GH, Alaris CC, Alaris TIVA, The… | |
| Modificada | Media (6.1) | 2.5% | — | TwistedFedoraproject FedoraCanonical Ubuntu LinuxOracle ZFS Storage Appliance KIT+1 | 10/6/2019 | 17/6/2026 | In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF. | |
| Modificada | Media (6.1) | 2.4% | 💥 Exploit | Polarisft Intellect Core Banking | 30/4/2019 | 17/6/2026 | An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. An open redirect exists via a /IntellectMain.jsp?IntellectSystem= URI. | |
| Modificada | Alta (8.8) | 0.64% | — | Polarisft Intellect Core Banking | 30/4/2019 | 17/6/2026 | An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. CSRF can occur via a /CollatWebApp/gcmsRefInsert?name=SUPP URI. | |
| Modificada | Media (5.4) | 0.65% | — | Polarisft Intellect Core Banking | 30/4/2019 | 17/6/2026 | An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter. | |
| Modificada | Alta (8.8) | 1.4% | — | Polarisft Intellect Core Banking | 30/4/2019 | 17/6/2026 | An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. Input passed through the code parameter in three pages as collaterals/colexe3t.jsp and /references/refsuppu.jsp and /references/refbranu.jsp is mishandled before being used in SQL queries, allowing SQL injection with an… | |
| Modificada | Media (5.3) | 1.4% | — | Oracle Solaris | 23/4/2019 | 17/6/2026 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: IPS Package Manager). The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this… | |
| Modificada | Baja (3.3) | 0.37% | — | Oracle Solaris | 23/4/2019 | 17/6/2026 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: File Locking Services). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle… | |
| Modificada | Media (4) | 0.38% | — | Oracle Solaris | 16/1/2019 | 17/6/2026 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.… | |
| Modificada | Media (4) | 0.43% | — | Oracle Solaris | 16/1/2019 | 17/6/2026 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.… | |
| Modificada | Media (5.3) | 1.7% | — | Oracle Solaris | 16/1/2019 | 17/6/2026 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via KSSL to compromise Oracle Solaris. Successful attacks of this… | |
| Modificada | Alta (7.5) | 0.93% | — | Oracle Solaris | 16/1/2019 | 17/6/2026 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client). The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle… | |
| Modificada | Alta (7.5) | 2.0% | — | Oracle Solaris | 16/1/2019 | 17/6/2026 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability… | |
| Modificada | Media (5.3) | 3.7% | — | Openbsd OpensshWinscpNetapp Cloud BackupNetapp Element Software+18 | 10/1/2019 | 17/6/2026 | In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. | |
| Modificada | Alta (7.4) | 2.4% | — | Oracle Solaris | 17/10/2018 | 17/6/2026 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LibKMIP). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks of this… | |
| Modificada | Media (5.7) | 1.8% | — | Oracle Solaris | 17/10/2018 | 17/6/2026 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Solaris. Successful attacks require human interaction from a… | |
| Modificada | Alta (8.1) | 2.7% | — | Oracle Solaris | 17/10/2018 | 17/6/2026 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon (RAD)). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful… | |
| Modificada | Media (6.2) | 0.51% | — | Oracle Solaris | 17/10/2018 | 17/6/2026 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones Virtualized NIC Driver). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise… | |
| Modificada | Media (5.3) | 0.39% | — | Oracle Solaris | 17/10/2018 | 17/6/2026 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. While the… | |
| Modificada | Baja (1.8) | 0.41% | — | Oracle Solaris | 17/10/2018 | 17/6/2026 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks… |