Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
–

36 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (8.8)3.8%—Adobe Flash PlayerAdobe AIRAdobe AIR SDKSamsung X14j Firmware+312/3/201617/6/2026
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory…
ModificadaAlta (8.8)5.7%—Adobe Flash PlayerAdobe AIRAdobe AIR SDKSamsung X14j Firmware+312/3/201617/6/2026
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified…
ModificadaAlta (8.8)3.8%—Adobe Flash PlayerAdobe AIRAdobe AIR SDKSamsung X14j Firmware+312/3/201617/6/2026
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory…
ModificadaAlta (8.8)3.8%—Adobe Flash PlayerAdobe AIRAdobe AIR SDKSamsung X14j Firmware+312/3/201617/6/2026
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory…
ModificadaAlta (8.8)3.8%—Adobe Flash PlayerAdobe AIRAdobe AIR SDKSamsung X14j Firmware+312/3/201617/6/2026
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory…
ModificadaAlta (7.5)3.9%—Cisco Unified Computing SystemCisco Nx-osNetgear Jr6150 FirmwareSamsung X14j Firmware+33/3/201617/6/2026
Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to cause a denial of service (TCP stack reload) by sending crafted TCP packets to a device that has a TIME_WAIT TCP session, aka Bug ID CSCub70579.
ModificadaCrítica (9.8)3.7%—Samsung X14j FirmwareSUN OpensolarisZyxel Gs1900-10hp FirmwareZzinc Keymouse Firmware3/3/201617/6/2026
Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.
ModificadaMedia (6.5)4.6%—Canonical Ubuntu LinuxSamsung X14j Firmware17/2/201617/6/2026
Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory…
ModificadaMedia (5.3)0.83%—SUN OpensolarisSamsung X14j FirmwareZyxel Gs1900-10hp FirmwareZzinc Keymouse Firmware9/2/201617/6/2026
Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users…
ModificadaMedia (6.5)1.4%—Samsung X14j Firmware7/2/201617/6/2026
SQL injection vulnerability in Cisco Unified Communications Manager 10.5(2.13900.9) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227.
ModificadaAlta (8.8)2.2%—Samsung X14j FirmwareSUN OpensolarisZyxel Gs1900-10hp FirmwareZzinc Keymouse Firmware+17/2/201617/6/2026
Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka Bug ID…
Orbitaley — Vulnerabilidades