Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2736▼ 336 respecto a la semana anterior
Críticas / altas1272▼ 222 respecto a la semana anterior
Nueva explotación activa (KEV)8→ sin cambios respecto a la semana anterior
Sin puntuar (sin CVSS)213▼ 108 respecto a la semana anterior
9547 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.5) | 0.48% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow. | |
| Analizada | Media (5.4) | 0.41% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read. | |
| Analizada | Media (5.3) | 0.49% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers. | |
| Analizada | Media (5.3) | 0.49% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read. | |
| Analizada | Crítica (9.6) | 0.63% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication. | |
| Analizada | Alta (7.3) | 0.46% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication. | |
| Analizada | Media (4.3) | 0.50% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability. | |
| Analizada | Media (5.3) | 0.49% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to resource exhaustion. | |
| Analizada | Media (5.3) | 0.49% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable. | |
| Analizada | Media (5.3) | 0.49% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests. | |
| Analizada | Alta (8.2) | 0.44% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens. | |
| Analizada | Media (4.3) | 0.29% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management. | |
| Analizada | Baja (2.7) | 0.44% | — | IBM I | 13/8/2026 | 19/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal. | |
| Analizada | Alta (7.5) | 0.55% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server. | |
| Analizada | Alta (7.5) | 0.55% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop. | |
| Analizada | Alta (8.8) | 0.75% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow. | |
| Analizada | Crítica (9.8) | 0.67% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a buffer overflow. | |
| Analizada | Alta (7.5) | 0.55% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation. | |
| Analizada | Alta (7.3) | 0.22% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of anti-CSRF tokens. | |
| Analizada | Alta (8.1) | 0.43% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform unauthorized operations and access sensitive information due to improper session management. | |
| Analizada | Baja (3.8) | 0.47% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to delete arbitrary files due to path traversal. | |
| Analizada | Alta (8.8) | 0.17% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write. | |
| En análisis | Alta (7.5) | 0.55% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop. | |
| En análisis | Alta (7.8) | 0.15% | — | IBM I | 13/8/2026 | 17/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable. | |
| En análisis | Alta (7.5) | 0.55% | — | IBM I | 13/8/2026 | 18/8/2026 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a heap buffer overflow. |