Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2678▼ 660 respecto a la semana anterior
Críticas / altas1266▼ 293 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)250▼ 252 respecto a la semana anterior
601 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 6.6% | — | Dom4j Project Dom4jDebian LinuxOracle Flexcube Investor ServicingOracle Primavera P6 Enterprise Project Portfolio Management+10 | 20/8/2018 | 17/6/2026 | dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML… | |
| Modificada | Baja (2.8) | 0.42% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+1 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell: Core / Client). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server.… | |
| Modificada | Baja (2.7) | 1.3% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+1 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this… | |
| Modificada | Media (5) | 2.7% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+7 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols… | |
| Modificada | Media (4.9) | 1.9% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+1 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this… | |
| Modificada | Media (4.9) | 1.9% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+1 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability… | |
| Modificada | Media (4.9) | 1.9% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+1 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this… | |
| Modificada | Media (4.9) | 3.4% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+2 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful… | |
| Modificada | Media (4.9) | 1.9% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+1 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks… | |
| Modificada | Media (5.3) | 1.8% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+1 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.11 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of… | |
| Modificada | Media (6.5) | 2.0% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+1 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this… | |
| Modificada | Media (4.9) | 2.9% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+2 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log). Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this… | |
| Modificada | Media (6.5) | 3.6% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+3 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL… | |
| Modificada | Media (4.9) | 1.9% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+1 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this… | |
| Modificada | Baja (3.3) | 1.9% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+7 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise… | |
| Modificada | Media (6.5) | 3.6% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+2 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful… | |
| Modificada | Alta (7.1) | 3.1% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+4 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.… | |
| Modificada | Media (4.9) | 3.2% | — | Oracle MysqlDebian LinuxNetapp Oncommand InsightNetapp Oncommand Workflow Automation+3 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks… | |
| Modificada | Media (5.3) | 3.0% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+2 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via memcached to compromise MySQL… | |
| Modificada | Media (4.9) | 2.9% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+2 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this… | |
| Modificada | Media (6.5) | 2.9% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+3 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks… | |
| Modificada | Media (4.3) | 2.4% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+7 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.… | |
| Modificada | Media (4.3) | 2.5% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+2 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL… | |
| Modificada | Media (4.9) | 3.4% | — | Oracle MysqlNetapp Oncommand InsightNetapp Oncommand Workflow AutomationNetapp Snapcenter+2 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful… | |
| Modificada | Baja (3.1) | 1.6% | — | Oracle MysqlDebian LinuxCanonical Ubuntu LinuxRedhat Openstack+10 | 18/7/2018 | 17/6/2026 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to… |