Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

35 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2011-2651	Modificada	Alta (7.5)	2.7%	—	Marcus Schafer Kiwi Novell Suse Studio Onsite	23/8/2011	16/6/2026	Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename.
CVE-2011-2650	Modificada	Media (4.3)	1.2%	—	Marcus Schafer Kiwi Novell Suse Studio Onsite	23/8/2011	16/6/2026	Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted pattern name that is included in an RPM info display.
CVE-2011-2649	Modificada	Alta (7.5)	1.7%	—	Marcus Schafer Kiwi Novell Suse Studio Onsite	23/8/2011	16/6/2026	Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.
CVE-2011-2648	Modificada	Alta (7.5)	2.7%	—	Marcus Schafer Kiwi Novell Suse Studio Onsite	23/8/2011	16/6/2026	Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file.
CVE-2011-2647	Modificada	Alta (7.5)	2.7%	—	Marcus Schafer Kiwi Novell Suse Studio Onsite	23/8/2011	16/6/2026	Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files.
CVE-2011-2646	Modificada	Alta (7.5)	2.7%	—	Marcus Schafer Kiwi Novell Suse Studio Onsite	23/8/2011	16/6/2026	Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files.
CVE-2011-2645	Modificada	Alta (7.5)	2.7%	—	Marcus Schafer Kiwi Novell Suse Studio Onsite	23/8/2011	16/6/2026	Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM.
CVE-2011-2644	Modificada	Media (4.3)	1.2%	—	Marcus Schafer Kiwi Novell Suse Studio Onsite	23/8/2011	16/6/2026	Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display.
CVE-2011-2226	Modificada	Media (4.3)	1.2%	—	Marcus Schafer Kiwi Novell Suse Studio Onsite	23/8/2011	16/6/2026	Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a pattern listing.
CVE-2011-2225	Modificada	Alta (9.3)	1.4%	—	Marcus Schafer Kiwi Novell Suse Studio Onsite	23/8/2011	16/6/2026	Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.