Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2666▼ 407 respecto a la semana anterior

Críticas / altas1266▼ 215 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)215▼ 115 respecto a la semana anterior

478 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2004-1362	Modificada	Alta (7.5)	9.0%	—	Oracle Application Server Oracle Collaboration Suite Oracle E-business Suite Oracle Enterprise Manager+5	4/8/2004	16/6/2026	The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are…
CVE-2004-1371	Modificada	Alta (9)	11%	—	Oracle Application Server Oracle Collaboration Suite Oracle Database Server Oracle E-business Suite+6	4/8/2004	16/6/2026	Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.
CVE-1999-1019	Modificada	Alta (7.2)	0.35%	—	Cabletron Spectrum Enterprise Manager	23/6/1999	16/6/2026	SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise.