Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2963▼ 120 respecto a la semana anterior

Críticas / altas1404▲ 47 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

31 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2013-3278	Modificada	Media (4.9)	0.34%	—	EMC Geosynchrony EMC Vplex GEO EMC Vplex Local EMC Vplex Metro	1/10/2013	16/6/2026	EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configuration file.
CVE-2012-1338	Modificada	Media (6.3)	1.1%	—	Cisco IOS Cisco Catalyst 3560 Cisco Catalyst 3560-e Cisco Catalyst 3560-x+5	6/8/2012	16/6/2026	Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service (device reload) by completing local web authentication quickly, aka Bug ID CSCts88664.
CVE-2005-4258	Modificada	Alta (7.8)	2.1%	—	Cisco Catalyst Cisco Catalyst 1200 Series Cisco Catalyst 1900 Series Cisco Catalyst 2800 Series+67	15/12/2005	16/6/2026	Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD). NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID.
CVE-2005-0356	Modificada	Media (5)	83%	💥 Exploit	Cisco Agent Desktop Cisco E-mail Manager Cisco Emergency Responder Cisco Intelligent Contact Manager+72	31/5/2005	16/6/2026	Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
CVE-2005-1733	Modificada	Media (5)	1.5%	—	Metro Marketing Cookie Cart	24/5/2005	16/6/2026	Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt.
CVE-2005-1732	Modificada	Media (5)	1.5%	—	Metro Marketing Cookie Cart	24/5/2005	16/6/2026	Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi.