Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2853▼ 343 respecto a la semana anterior

Críticas / altas1376▼ 50 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior

59 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-2881	Modificada	Alta (10)	1.9%	—	Citrix Netscaler Access Gateway Firmware Citrix Netscaler Application Delivery Controller Firmware Citrix Netscaler Application Delivery Controller Citrix Netscaler Access Gateway	1/5/2014	17/6/2026	Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors.
CVE-2013-6943	Modificada	Media (5)	1.6%	—	Citrix Netscaler Application Delivery Controller Firmware	11/3/2014	17/6/2026	Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames.
CVE-2013-6944	Modificada	Media (4.3)	1.5%	—	Citrix Netscaler Application Delivery Controller Firmware	11/3/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-6941	Modificada	Alta (10)	1.6%	—	Citrix Netscaler Application Delivery Controller Firmware	11/3/2014	17/6/2026	Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via unknown vectors.
CVE-2013-6942	Modificada	Media (6.8)	0.87%	—	Citrix Netscaler Application Delivery Controller Firmware	11/3/2014	17/6/2026	Cross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2013-6940	Modificada	Media (5)	1.0%	—	Citrix Netscaler Application Delivery Controller Firmware	11/3/2014	17/6/2026	Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive information via unspecified vectors.
CVE-2013-6939	Modificada	Media (5)	1.5%	—	Citrix Netscaler Application Delivery Controller Firmware	11/3/2014	17/6/2026	Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication."
CVE-2013-6938	Modificada	Media (5)	1.4%	—	Citrix Netscaler Application Delivery Controller Firmware	11/3/2014	17/6/2026	Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 before 10.0-77.5 and Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to the "Virtual…
CVE-2013-6011	Modificada	Alta (7.8)	1.5%	—	Citrix Netscaler Application Delivery Controller Firmware Citrix Netscaler Application Delivery Controller	4/10/2013	16/6/2026	Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service (nsconfigd crash and appliance reboot) via a crafted request.