Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

32 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-16146	Modificada	Alta (7.5)	2.0%	—	Mockserve Project Mockserve	7/6/2018	17/6/2026	mockserve is a file server. mockserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
CVE-2017-16106	Modificada	Alta (7.5)	2.0%	—	Tmock Project Tmock	7/6/2018	17/6/2026	tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
CVE-2018-9117	Modificada	Media (5.3)	2.6%	—	Wiremock	29/3/2018	17/6/2026	WireMock before 2.16.0 contains a vulnerability that allows a remote unauthenticated attacker to access local files beyond the application directory via a specially crafted XML request, aka Directory Traversal.
CVE-2018-9116	Modificada	Crítica (9.1)	1.9%	—	Wiremock	29/3/2018	17/6/2026	An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated attacker to access local files and internal resources and potentially cause a Denial of Service.
CVE-2017-2241	Modificada	Media (6.3)	0.73%	—	Hammock Assetview	17/7/2017	17/6/2026	SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".
CVE-2017-2240	Modificada	Media (6.5)	1.6%	—	Hammock Assetview	17/7/2017	17/6/2026	Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service".
CVE-2016-6299	Modificada	Alta (7.8)	1.7%	—	Fedoraproject Fedora Mock Project SCM Plugin	14/4/2017	17/6/2026	The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file.