Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2739▼ 510 respecto a la semana anterior
Críticas / altas1303▼ 212 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior
715 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 6.4% | — | F5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip WebsafeF5 Big-ip Link Controller+4 | 3/10/2016 | 17/6/2026 | Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration,… | |
| Modificada | Alta (7.5) | 1.6% | — | F5 Big-ip Local Traffic ManagerF5 Big-ip WebacceleratorF5 Big-ip Application Acceleration ManagerF5 Big-ip Global Traffic Manager+10 | 7/9/2016 | 17/6/2026 | The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP Analytics 11.2.1,… | |
| Modificada | Crítica (9.8) | 3.5% | — | F5 Big-ip Link ControllerF5 Big-ip Policy Enforcement ManagerF5 Big-ip Access Policy ManagerF5 Big-ip Global Traffic Manager+18 | 7/9/2016 | 17/6/2026 | F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3; BIG-IP DNS 12.x before… | |
| Modificada | Alta (7.5) | 3.0% | — | F5 Big-ip Edge GatewayF5 Big-ip Protocol Security ModuleF5 Big-ip AnalyticsF5 Big-ip Application Security Manager+9 | 26/8/2016 | 17/6/2026 | Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP profile, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) via crafted network traffic. | |
| Modificada | Media (4.9) | 1.5% | — | F5 Big-ip WebacceleratorF5 Big-ip Link ControllerF5 Big-ip Access Policy ManagerF5 Big-ip Application Security Manager+10 | 26/8/2016 | 17/6/2026 | The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors. | |
| Modificada | Alta (7.5) | 2.3% | — | F5 Big-ip Application Acceleration ManagerF5 Big-ip WebacceleratorF5 Big-ip AnalyticsF5 Big-ip Domain Name System+11 | 19/8/2016 | 17/6/2026 | The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before… | |
| Modificada | Alta (7.5) | 2.7% | — | F5 Big-ip Global Traffic ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip WebacceleratorF5 Big-ip Policy Enforcement Manager+10 | 19/8/2016 | 17/6/2026 | The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AFM and PEM 11.3.x, 11.4.x… | |
| Modificada | Alta (8.8) | 3.4% | — | F5 Big-ip WAN Optimization ManagerF5 Big-ip Protocol Security ModuleF5 Big-ip Application Acceleration ManagerF5 Big-ip Edge Gateway+10 | 30/6/2016 | 17/6/2026 | F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and gain privilege via a crafted external Extended Application Verification (EAV) monitor script. | |
| Modificada | Media (4.9) | 1.2% | — | F5 Big-iq Application Delivery ControllerF5 Big-iq Cloud AND OrchestrationF5 Big-ip Application Acceleration ManagerF5 Big-ip Access Policy Manager+12 | 24/6/2016 | 17/6/2026 | The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF3; BIG-IP DNS 12.x before 12.0.0 HF3; BIG-IP GTM 11.5.x before 11.5.4 and 11.6.x before 11.6.1; BIG-IQ Cloud and Security 4.0.0 through 4.5.0; BIG-IQ… | |
| Modificada | Alta (7.5) | 1.8% | — | F5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Analytics+5 | 7/6/2016 | 17/6/2026 | Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service (resource consumption and Traffic Management Microkernel restart) via an SSL alert during the handshake. | |
| Modificada | Media (5.9) | 2.0% | — | F5 Big-ip Access Policy ManagerF5 Big-ip WAN Optimization ManagerF5 Big-ip Application Security ManagerF5 Big-ip Link Controller+17 | 13/5/2016 | 17/6/2026 | F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP DNS 12.x before 12.0.0 HF1;… | |
| Modificada | Alta (7.4) | 0.79% | — | F5 Big-iq SecurityF5 Big-ip WebacceleratorF5 Big-ip Application Security ManagerF5 Big-ip Access Policy Manager+14 | 13/4/2016 | 17/6/2026 | F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build… | |
| Modificada | Media (4.3) | 1.4% | — | F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Application Acceleration Manager+9 | 12/4/2016 | 17/6/2026 | Incomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, Link Controller, and PSM 11.x before 11.2.1 HF11, 11.3.x, 11.4.0 before HF8, and 11.4.1 before HF6; BIG-IP AAM 11.4.0 before HF8 and 11.4.1 before HF6; BIG-IP AFM and PEM 11.3.x, 11.4.0 before HF8, and 11.4.1… | |
| Modificada | Alta (7.5) | 1.8% | — | F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Application Acceleration Manager+6 | 11/4/2016 | 17/6/2026 | The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers to cause a denial… | |
| Modificada | Media (6.5) | 1.8% | — | HP Enterprise Security ManagerHP Enterprise Security Manager Express | 17/3/2016 | 17/6/2026 | HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensitive information via unspecified vectors. | |
| Modificada | Alta (8) | 1.6% | — | Microfocus Arcsight Enterprise Security Manager | 16/3/2016 | 17/6/2026 | HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors. | |
| Modificada | Alta (7.8) | 0.40% | — | Microfocus Arcsight Enterprise Security Manager | 16/3/2016 | 17/6/2026 | HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors. | |
| Modificada | Alta (8.1) | 91% | 💥 Exploit | Debian LinuxCanonical Ubuntu LinuxHP Helion OpenstackHP Server Migration Pack+26 | 18/2/2016 | 17/6/2026 | Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the… | |
| Modificada | Alta (8.8) | 2.5% | — | Cisco Prime Security ManagerCisco ASA CX Context-aware Security Software | 7/2/2016 | 17/6/2026 | The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842. | |
| Modificada | Alta (7.5) | 2.9% | — | F5 Big-iq Application Delivery ControllerF5 Big-ip Local Traffic ManagerF5 Big-ip Access Policy ManagerF5 Big-ip Edge Gateway+14 | 20/1/2016 | 17/6/2026 | Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.x before HF6, BIG-IP AAM 11.4.x, 11.5.x before 11.5.3 HF2 and 11.6.0 before HF6, BIG-IP AFM and PEM 11.3.x, 11.4.x, 11.5.x… | |
| Modificada | Crítica (9.8) | 3.2% | — | F5 Big-ip Domain Name SystemF5 Big-ip Application Acceleration ManagerF5 Big-ip Link ControllerF5 Big-ip Policy Enforcement Manager+5 | 12/1/2016 | 17/6/2026 | BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management (AOM) subsystem, which might allow remote attackers to obtain login access to AOM via an (1) expired or (2) default… | |
| Modificada | Baja (3.7) | 1.5% | — | F5 Big-ip AnalyticsF5 Big-ip Application Acceleration ManagerF5 Big-ip Link ControllerF5 Big-ip Advanced Firewall Manager+4 | 12/1/2016 | 17/6/2026 | BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service (Traffic Management Microkernel (TMM) restart) via crafted ICMP packets, related to… | |
| Modificada | Alta (7.4) | 0.34% | — | F5 Big-iq Application Delivery ControllerF5 Big-ip Application Security ManagerF5 Big-iq SecurityF5 Big-ip WAN Optimization Manager+16 | 12/1/2016 | 17/6/2026 | dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AFM and PEM 11.3.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP DNS 12.0.0 before 12.0.0 HF1, BIG-IP Edge Gateway,… | |
| Modificada | Alta (9) | 69% | 💥 Exploit | F5 Big-iq SecurityF5 Big-ip Application Acceleration ManagerF5 Big-ip WAN Optimization ManagerF5 Big-iq ADC+14 | 7/12/2015 | 17/6/2026 | The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP AAM 11.4.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0, BIG-IP GTM 11.3.0 before 11.6.0 HF6, BIG-IP PSM 11.3.0… | |
| Modificada | Alta (9.3) | 3.4% | — | Mcafee Enterprise Security Manager | 2/12/2015 | 17/6/2026 | McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote attackers to bypass… |