Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

108 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2016-3508	Modificada	Media (5.3)	4.8%	—	Oracle JDK Oracle JRE Oracle Jrockit Oracle Linux	21/7/2016	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.
CVE-2016-3500	Modificada	Media (5.3)	4.8%	—	Oracle Linux Oracle JDK Oracle JRE Oracle Jrockit	21/7/2016	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.
CVE-2016-3485	Modificada	Baja (2.9)	0.45%	—	Oracle JDK Oracle JRE Oracle Jrockit	21/7/2016	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows local users to affect integrity via vectors related to Networking.
CVE-2016-3427	Analizada	Crítica (9.8)	92%	⚠ Explotación activa	Oracle JDK Oracle JRE Oracle Jrockit Oracle Linux+34	21/4/2016	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVE-2016-3425	Modificada	Media (4.3)	3.8%	—	Oracle JDK Oracle JRE Oracle Jrockit	21/4/2016	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP.
CVE-2016-0695	Modificada	Media (5.9)	3.4%	—	Oracle JDK Oracle JRE Oracle Jrockit Redhat Icedtea7+8	21/4/2016	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.
CVE-2016-0483	Modificada	Alta (10)	15%	—	Oracle JDK Oracle JRE Oracle Jrockit Canonical Ubuntu Linux	21/1/2016	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party…
CVE-2016-0475	Modificada	Media (5.8)	3.7%	—	Oracle JDK Oracle JRE Oracle Jrockit	21/1/2016	17/6/2026	Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
CVE-2015-4911	Modificada	Media (5)	4.5%	—	Oracle Jrockit Oracle JDK Oracle JRE	22/10/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893.
CVE-2015-4893	Modificada	Media (5)	5.3%	—	Oracle Jrockit Oracle JDK Oracle JRE	21/10/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911.
CVE-2015-4872	Modificada	Media (5)	3.7%	—	Oracle Jrockit Oracle JDK Oracle JRE	21/10/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security.
CVE-2015-4803	Modificada	Media (5)	5.3%	—	Oracle Jrockit Oracle JDK Oracle JRE	21/10/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911.
CVE-2015-4749	Modificada	Media (4.3)	3.3%	—	Oracle Jrockit Oracle JDK Oracle JRE	16/7/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.
CVE-2015-4748	Modificada	Alta (7.6)	45%	—	Oracle Jrockit Oracle JDK Oracle JRE	16/7/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.
CVE-2015-2625	Modificada	Baja (2.6)	3.8%	—	Oracle JDK Oracle JRE Oracle Jrockit	16/7/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.
CVE-2015-2601	Modificada	Media (5)	3.6%	—	Oracle Jrockit Oracle JDK Oracle JRE	16/7/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
CVE-2015-4000	Modificada	Baja (3.7)	100%	💥 PoC	Openssl Canonical Ubuntu Linux Hp-ux IBM Content Manager+21	21/5/2015	17/6/2026	The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a…
CVE-2015-0488	Modificada	Media (5)	3.6%	—	Oracle Jrockit Oracle JDK Oracle JRE	16/4/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.
CVE-2015-0478	Modificada	Media (4.3)	2.8%	—	Oracle Jrockit Oracle JDK Oracle JRE	16/4/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.
CVE-2015-0410	Modificada	Media (5)	5.0%	—	Oracle JDK Oracle JRE Oracle Jrockit Canonical Ubuntu Linux+5	21/1/2015	17/6/2026	Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.
CVE-2015-0383	Modificada	Media (5.4)	0.45%	—	Canonical Ubuntu Linux Debian Linux Fedoraproject Fedora Novell Suse Linux Enterprise Desktop+6	21/1/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.
CVE-2014-6593	Modificada	Media (4)	66%	💥 Exploit	Oracle Jrockit Oracle JDK Oracle JRE	21/1/2015	17/6/2026	Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.
CVE-2014-6558	Modificada	Baja (2.6)	3.1%	—	Oracle Jrockit Oracle JDK Oracle JRE	15/10/2014	17/6/2026	Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security.
CVE-2014-6517	Modificada	Media (5)	4.1%	—	Oracle Jrockit Oracle JDK Oracle JRE	15/10/2014	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP.
CVE-2014-6512	Modificada	Media (4.3)	3.0%	—	Oracle Jrockit Oracle JDK Oracle JRE	15/10/2014	17/6/2026	Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.