Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

37 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-10375	Modificada	Alta (7.5)	1.2%	—	GNU Exosip	14/8/2019	17/6/2026	handle_messages in eXtl_tls.c in eXosip before 5.0.0 mishandles a negative value in a content-length header.
CVE-2017-14332	Modificada	Alta (8.1)	1.0%	—	Extremenetworks Extremexos	23/10/2017	17/6/2026	Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values.
CVE-2017-14331	Modificada	Media (6.7)	0.37%	—	Extremenetworks Extremexos	23/10/2017	17/6/2026	Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell.
CVE-2017-14330	Modificada	Media (6.7)	0.32%	—	Extremenetworks Extremexos	23/10/2017	17/6/2026	Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process.
CVE-2017-14329	Modificada	Media (6.7)	0.27%	—	Extremenetworks Extremexos	23/10/2017	17/6/2026	Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell.
CVE-2017-14328	Modificada	Alta (7.5)	1.3%	—	Extremenetworks Extremexos	23/10/2017	17/6/2026	Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot.
CVE-2017-14327	Modificada	Media (4.4)	0.34%	—	Extremenetworks Extremexos	23/10/2017	17/6/2026	Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files.
CVE-2013-7309	Modificada	Media (5.4)	1.2%	—	Extremenetworks Exos	23/1/2014	17/6/2026	The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet…
CVE-2011-3736	Modificada	Media (5)	1.3%	—	Exoscripts Exophpdesk	23/9/2011	16/6/2026	ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by upgrades/upgrade9.php and certain other files.
CVE-2008-6917	Modificada	Alta (7.5)	1.0%	💥 Exploit	Exoscripts Exophpdesk	7/8/2009	16/6/2026	SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the username (user parameter).
CVE-2009-1039	Modificada	Alta (7.5)	5.3%	💥 Exploit	Cdexos Cdex	20/3/2009	16/6/2026	Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vorbis (.ogg) file.
CVE-1999-0099	Modificada	Alta (10)	3.3%	—	Bsdi BSD OS Convexos Convex Spp-ux Cray Unicos+3	19/10/1995	16/6/2026	Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.