Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2965▲ 27 respecto a la semana anterior
Críticas / altas1456▲ 193 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior
943 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (9.3) | 3.3% | — | Oracle JavafxOracle JREOracle JDK | 16/10/2013 | 16/6/2026 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. | |
| Modificada | Baja (3.5) | 2.6% | — | Oracle JDKSUN JDKOracle JavafxOracle JRE+2 | 16/10/2013 | 16/6/2026 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Javadoc. | |
| Modificada | Alta (9.3) | 3.3% | — | Oracle JREOracle JavafxOracle JDK | 16/10/2013 | 16/6/2026 | Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-5775. | |
| Modificada | Alta (7.5) | 2.5% | — | Oracle JREOracle JavafxOracle JDK | 16/10/2013 | 16/6/2026 | Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-5777. | |
| Modificada | Media (4.3) | 2.8% | — | Emeric Vernat Javamelody | 30/9/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header. | |
| Modificada | Baja (2.1) | 1.5% | — | HP Icewall Smart Device OptionHP Icewall SSO AgentHP Icewall SSO Saml2 OptionHP Icewall File Manager+3 | 23/9/2013 | 16/6/2026 | Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, IceWall SSO SAML2 Agent Option 8.0, IceWall SSO JAVA Agent Library 8.0 through 10.0, IceWall Federation Agent 3.0, and IceWall File Manager 3.0 through SP4 allows remote… | |
| Modificada | Media (4.3) | 5.9% | — | Apache Santuario XML Security FOR Java | 20/8/2013 | 16/6/2026 | jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to… | |
| Modificada | Alta (7.1) | 25% | — | IBM JavaOracle JDKOracle JREOracle Jrockit+11 | 23/7/2013 | 16/6/2026 | XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8… | |
| Modificada | Alta (9.3) | 4.4% | — | IBM Java | 23/7/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability… | |
| Modificada | Alta (9.3) | 4.4% | — | IBM Java | 23/7/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability… | |
| Modificada | Alta (9.3) | 4.0% | — | IBM Java | 23/7/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3007. | |
| Modificada | Alta (9.3) | 4.4% | — | IBM Java | 23/7/2013 | 16/6/2026 | The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a… | |
| Modificada | Alta (9.3) | 4.0% | — | IBM Java | 23/7/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006. | |
| Modificada | Alta (9.3) | 4.0% | — | IBM Java | 23/7/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006. | |
| Modificada | Alta (9.3) | 4.0% | — | IBM Java | 23/7/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3008. | |
| Analizada | Crítica (9.8) | 99% | ⚠ Explotación activa | Oracle JRESUN JRESuse Linux Enterprise DesktopSuse Linux Enterprise Java+2 | 18/6/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the… | |
| Modificada | Media (5) | 4.9% | — | Oracle JREOracle JDKSUN JRESUN JDK+1 | 18/6/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information… | |
| Modificada | Media (4.3) | 67% | — | Oracle JDKSUN JDKOracle JRESUN JRE+1 | 18/6/2013 | 16/6/2026 | Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the… | |
| Modificada | Media (6.9) | 0.42% | — | Oracle JREOracle JDKSUN JRESUN JDK+1 | 17/4/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install. | |
| Modificada | Alta (10) | 5.1% | — | Oracle JREOracle JDKOracle Javafx | 17/4/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. | |
| Modificada | Alta (10) | 7.1% | — | Oracle JREOracle JDKSUN JRESUN JDK+1 | 17/4/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a… | |
| Modificada | Alta (7.6) | 5.7% | — | Oracle JREOracle JDKSUN JRESUN JDK+1 | 17/4/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors… | |
| Modificada | Alta (10) | 4.7% | — | Oracle JREOracle JDKOracle Javafx | 17/4/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402,… | |
| Modificada | Alta (10) | 4.7% | — | Oracle JREOracle JDKOracle Javafx | 17/4/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402,… | |
| Modificada | Alta (10) | 4.7% | — | Oracle JREOracle JDKOracle Javafx | 17/4/2013 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402,… |