Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2659▼ 692 respecto a la semana anterior
Críticas / altas1261▼ 300 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)250▼ 252 respecto a la semana anterior
894 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.8% | — | FreeradiusSuse Linux Enterprise ServerSuse Linux Enterprise Software Development KIT | 5/4/2017 | 17/6/2026 | FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates. | |
| Modificada | Alta (7.5) | 3.3% | — | Clusterlabs PacemakerOpensuse LeapOpensuse Project LeapSuse Linux Enterprise High Availability+3 | 24/3/2017 | 17/6/2026 | Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection. | |
| Modificada | Alta (7.5) | 6.0% | — | Jasper Project JasperFedoraproject FedoraOpensuse LeapSuse Linux Enterprise Desktop+2 | 23/3/2017 | 17/6/2026 | The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. | |
| Modificada | Alta (7.5) | 3.7% | — | OpensuseOpensuse Project LeapOpensuse Project Suse Linux Enterprise DebuginfoOpensuse Project Suse Linux Enterprise Desktop+5 | 20/3/2017 | 17/6/2026 | ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash). | |
| Modificada | Alta (7.5) | 3.6% | — | OpensuseOpensuse Project LeapOpensuse Project Suse Linux Enterprise DesktopOpensuse Project Suse Linux Enterprise Server+4 | 20/3/2017 | 17/6/2026 | Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption). | |
| Modificada | Alta (7.5) | 3.6% | — | OpensuseOpensuse Project LeapOpensuse Project Suse Linux Enterprise DebuginfoOpensuse Project Suse Linux Enterprise Desktop+5 | 20/3/2017 | 17/6/2026 | The png coder in ImageMagick allows remote attackers to cause a denial of service (crash). | |
| Modificada | Alta (7.5) | 3.7% | — | Opensuse LeapOpensuseOpensuse Project LeapOpensuse Project Suse Linux Enterprise Desktop+6 | 20/3/2017 | 17/6/2026 | Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption). | |
| Modificada | Crítica (9.8) | 4.6% | — | Opensuse Project Studio OnsiteOpensuseOpensuse Project LeapOpensuse Project Suse Linux Enterprise Debuginfo+6 | 20/3/2017 | 17/6/2026 | The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. | |
| Modificada | Crítica (9.8) | 4.9% | — | Suse Studio OnsiteOpensuse LeapOpensuseOpensuse Project Leap+7 | 20/3/2017 | 17/6/2026 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact. | |
| Modificada | Media (5.5) | 1.9% | — | Suse Studio OnsiteOpensuse LeapOpensuseOpensuse Project Leap+7 | 20/3/2017 | 17/6/2026 | The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file. | |
| Modificada | Media (5.5) | 2.1% | — | Suse Studio OnsiteOpensuseOpensuse Project LeapOpensuse Project Suse Linux Enterprise Debuginfo+6 | 20/3/2017 | 17/6/2026 | The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file. | |
| Modificada | Crítica (9.8) | 3.9% | — | OpensuseOpensuse Project LeapOpensuse Project Suse Linux Enterprise DesktopOpensuse Project Suse Linux Enterprise Server+4 | 20/3/2017 | 17/6/2026 | The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors. | |
| Modificada | Alta (7.5) | 3.6% | — | OpensuseOpensuse Project LeapOpensuse Project Suse Linux Enterprise DebuginfoOpensuse Project Suse Linux Enterprise Desktop+5 | 20/3/2017 | 17/6/2026 | Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. | |
| Modificada | Crítica (9.8) | 3.9% | — | OpensuseOpensuse Project LeapOpensuse Project Suse Linux Enterprise DesktopOpensuse Project Suse Linux Enterprise Server+4 | 20/3/2017 | 17/6/2026 | The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions." | |
| Modificada | Alta (7.5) | 3.7% | — | ImagemagickOpensuse LeapOpensuseSuse Linux Enterprise Server+3 | 17/3/2017 | 17/6/2026 | coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image." | |
| Modificada | Media (5.5) | 1.8% | — | ImagemagickSuse Linux Enterprise DebuginfoNovell LeapOpensuse Leap+7 | 17/3/2017 | 17/6/2026 | Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file. | |
| Modificada | Crítica (9.8) | 2.9% | — | ImagemagickOpensuseSuse Linux Enterprise DesktopSuse Linux Enterprise Server+3 | 17/3/2017 | 17/6/2026 | distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors. | |
| Modificada | Media (5.5) | 0.40% | — | QemuSuse Linux Enterprise DesktopSuse Linux Enterprise ServerSuse Linux Enterprise Server FOR SAP+1 | 15/3/2017 | 17/6/2026 | Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit. | |
| Modificada | Media (5.5) | 1.9% | — | GraphicsmagickDebian LinuxSuse Linux Enterprise DebuginfoSuse Studio Onsite+3 | 3/2/2017 | 17/6/2026 | GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c. | |
| Modificada | Media (5.5) | 2.0% | — | GraphicsmagickDebian LinuxSuse Linux Enterprise DebuginfoSuse Studio Onsite+3 | 3/2/2017 | 17/6/2026 | Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c. | |
| Modificada | Crítica (9.8) | 2.2% | — | Autodesk FBX Software Development KIT | 25/1/2017 | 17/6/2026 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed 3DS format files. | |
| Modificada | Crítica (9.8) | 2.2% | — | Autodesk FBX Software Development KIT | 25/1/2017 | 17/6/2026 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DAE format files. | |
| Modificada | Crítica (9.8) | 1.2% | — | Autodesk FBX Software Development KIT | 25/1/2017 | 17/6/2026 | Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects related to reading and converting malformed FBX format files can allow attackers to gain access to uninitialized pointers. | |
| Modificada | Alta (8.8) | 1.8% | — | Autodesk FBX Software Development KIT | 25/1/2017 | 17/6/2026 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DFX format files. | |
| Modificada | Crítica (9.8) | 4.1% | — | Autodesk FBX Software Development KIT | 25/1/2017 | 17/6/2026 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code or cause an infinite loop condition when reading or converting malformed FBX format files. |