Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2865▼ 160 respecto a la semana anterior

Críticas / altas1384▲ 52 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior

29 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2000-1082	Modificada	Media (4.6)	2.8%	—	Microsoft Data Engine Microsoft SQL Server	9/1/2001	16/6/2026	The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary…
CVE-2000-1081	Modificada	Media (4.6)	5.2%	—	Microsoft Data Engine Microsoft SQL Server	9/1/2001	16/6/2026	The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary…
CVE-2000-1087	Modificada	Media (4.6)	2.8%	—	Microsoft Data Engine Microsoft SQL Server	9/1/2001	16/6/2026	The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute…
CVE-2000-0202	Modificada	Alta (7.5)	9.4%	—	Microsoft Data Engine Microsoft SQL Server	8/3/2000	16/6/2026	Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.