Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
79 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 1.6% | — | Juniper Junos Space | 30/5/2017 | 17/6/2026 | On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device. | |
| Modificada | Alta (8.8) | 1.1% | — | Juniper Junos Space | 30/5/2017 | 17/6/2026 | On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation. | |
| Modificada | Media (6.5) | 0.92% | — | Juniper Junos Space | 20/3/2017 | 17/6/2026 | XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service. | |
| Modificada | Media (6.1) | 0.85% | — | Juniper Junos Space | 20/3/2017 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions. | |
| Modificada | Alta (8.8) | 3.6% | — | Juniper Junos Space | 20/3/2017 | 17/6/2026 | Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user. | |
| Modificada | Alta (8.8) | 0.66% | — | Juniper Junos Space | 20/3/2017 | 17/6/2026 | Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space. | |
| Modificada | Alta (8.1) | 1.2% | — | Juniper Junos Space | 20/3/2017 | 17/6/2026 | Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices. | |
| Modificada | Crítica (9.8) | 2.5% | — | Juniper Junos Space | 20/3/2017 | 17/6/2026 | Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication. | |
| Modificada | Media (4.3) | 4.7% | — | Canonical Ubuntu LinuxDebian LinuxOracle SolarisJuniper Junos Space+2 | 16/7/2015 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges. | |
| Modificada | Alta (7.5) | 9.7% | — | QemuJuniper Junos SpaceCanonical Ubuntu LinuxDebian Linux+14 | 15/6/2015 | 17/6/2026 | Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set. | |
| Modificada | Media (5.7) | 9.9% | — | Juniper Junos SpaceOracle MysqlDebian LinuxCanonical Ubuntu Linux+10 | 16/4/2015 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling. | |
| Modificada | Media (4.3) | 4.6% | — | Juniper Junos SpaceMariadbOracle SolarisOracle Mysql+4 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING. | |
| Modificada | Alta (7.5) | 5.7% | — | Oracle SolarisJuniper Junos SpaceMariadbOracle Mysql | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491. | |
| Modificada | Media (4.3) | 4.3% | — | Juniper Junos SpaceOracle SolarisMariadbOracle Mysql+4 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494. | |
| Modificada | Media (4.3) | 3.0% | — | Oracle MysqlOracle SolarisJuniper Junos SpaceMariadb+4 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL. | |
| Modificada | Media (4.3) | 4.8% | — | MariadbOracle SolarisJuniper Junos SpaceOracle Mysql+4 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496. | |
| Modificada | Alta (7.5) | 5.7% | — | Oracle MysqlJuniper Junos SpaceMariadbOracle Solaris | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500. | |
| Modificada | Media (4.3) | 2.6% | — | Juniper Junos SpaceOracle MysqlOracle SolarisMariadb+4 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL. | |
| Modificada | Alta (10) | 4.7% | — | Juniper Junos SpaceJuniper Junos Space Ja1500 ApplianceJuniper Junos Space Ja2500 Appliance | 20/5/2014 | 17/6/2026 | Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors. | |
| Modificada | Alta (10) | 6.6% | — | Canonical Ubuntu LinuxOracle JrockitJuniper Junos SpaceOracle JDK+3 | 16/4/2014 | 17/6/2026 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. | |
| Modificada | Media (5.8) | 4.3% | — | Oracle JrockitCanonical Ubuntu LinuxJuniper Junos SpaceOracle JDK+2 | 16/4/2014 | 17/6/2026 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI. | |
| Modificada | Alta (10) | 6.8% | — | Oracle JrockitCanonical Ubuntu LinuxJuniper Junos SpaceOracle JDK+3 | 16/4/2014 | 17/6/2026 | Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. | |
| Modificada | Alta (10) | 6.8% | — | Canonical Ubuntu LinuxOracle JrockitJuniper Junos SpaceOracle JDK+3 | 16/4/2014 | 17/6/2026 | Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. | |
| Modificada | Media (4) | 5.0% | — | Oracle JrockitCanonical Ubuntu LinuxJuniper Junos SpaceOracle JDK+3 | 16/4/2014 | 17/6/2026 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security. | |
| Modificada | Alta (10) | 7.4% | — | Canonical Ubuntu LinuxOracle JrockitJuniper Junos SpaceOracle JDK+3 | 16/4/2014 | 17/6/2026 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. |