Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
37 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5) | 6.4% | — | Apple Iphone OSApple MAC OS XApple TvosApple Watchos+11 | 15/12/2015 | 17/6/2026 | Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors. | |
| Modificada | Media (5) | 7.2% | — | HP Icewall Federation AgentHP Icewall File ManagerCanonical Ubuntu LinuxDebian Linux+5 | 15/12/2015 | 17/6/2026 | Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure. | |
| Modificada | Media (5) | 7.2% | — | Debian LinuxCanonical Ubuntu LinuxXmlsoft Libxml2Redhat Enterprise Linux Desktop+5 | 15/12/2015 | 17/6/2026 | Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors. | |
| Modificada | Alta (7.1) | 4.5% | — | Canonical Ubuntu LinuxRedhat Enterprise Linux DesktopRedhat Enterprise Linux HPC NodeRedhat Enterprise Linux Server+9 | 15/12/2015 | 17/6/2026 | The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660. | |
| Modificada | Media (4.3) | 14% | — | HP Icewall SSOHP Icewall SSO Agent OptionOpensslOracle VM Virtualbox+9 | 6/12/2015 | 17/6/2026 | ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange… | |
| Modificada | Media (6.8) | 4.7% | — | HP Icewall Federation AgentHP Icewall File ManagerDebian LinuxApple Iphone OS+5 | 18/11/2015 | 17/6/2026 | The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941. | |
| Modificada | Media (5) | 3.5% | — | HP Icewall McrpHP Icewall SSO | 22/5/2014 | 17/6/2026 | Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors. | |
| Modificada | Media (4) | 1.2% | — | HP Icewall Identity ManagerHP Icewall SSO Password Reset Option | 5/4/2014 | 17/6/2026 | Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors. | |
| Modificada | Baja (2.1) | 1.5% | — | HP Icewall Smart Device OptionHP Icewall SSO AgentHP Icewall SSO Saml2 OptionHP Icewall File Manager+3 | 23/9/2013 | 16/6/2026 | Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, IceWall SSO SAML2 Agent Option 8.0, IceWall SSO JAVA Agent Library 8.0 through 10.0, IceWall Federation Agent 3.0, and IceWall File Manager 3.0 through SP4 allows remote… | |
| Modificada | Baja (3.5) | 1.00% | — | HP Icewall SSO Agent Option | 23/9/2013 | 16/6/2026 | Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote authenticated users to obtain sensitive information via unknown vectors. | |
| Modificada | Media (5) | 3.3% | — | HP Icewall Smart Device OptionHP Icewall File ManagerHP Icewall SSO AgentHP Icewall SSO Agent Option | 23/9/2013 | 16/6/2026 | Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, and IceWall File Manager 3.0 through SP4 allows remote attackers to obtain sensitive information via unknown vectors. | |
| Modificada | Media (5) | 2.2% | — | HP Icewall SSO Agent Option | 23/9/2013 | 16/6/2026 | Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote attackers to obtain sensitive information via unknown vectors. |