Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior
Críticas / altas1313▼ 190 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior
60 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 53% | — | Symantec Mail Security FOR Microsoft ExchangeSymantec Norton Power EraserSymantec Protection EngineSymantec Endpoint Protection+14 | 30/6/2016 | 17/6/2026 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before… | |
| Modificada | Alta (7.3) | 11% | 💥 Exploit | Symantec Mail Security FOR Microsoft ExchangeSymantec Norton Power EraserSymantec Protection EngineSymantec Endpoint Protection+14 | 30/6/2016 | 17/6/2026 | Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint… | |
| Modificada | Alta (7.3) | 21% | 💥 Exploit | Symantec Mail Security FOR Microsoft ExchangeSymantec Norton Power EraserSymantec Protection EngineSymantec Endpoint Protection+14 | 30/6/2016 | 17/6/2026 | Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint… | |
| Modificada | Alta (8.4) | 18% | 💥 Exploit | Symantec Mail Security FOR Microsoft ExchangeSymantec Norton Power EraserSymantec Protection EngineSymantec Endpoint Protection+14 | 30/6/2016 | 17/6/2026 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before… | |
| Modificada | Media (4) | 1.9% | — | Shibboleth Service ProviderDebian Linux | 31/3/2015 | 17/6/2026 | Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message. | |
| Modificada | Media (5.8) | 2.2% | — | Eduserv Openathens Service Provider | 9/10/2012 | 16/6/2026 | Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack." | |
| Modificada | Baja (2.6) | 1.7% | — | Internet2 Identity ProviderInternet2 Service Provider | 6/11/2009 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5, and the Service Provider 1.3.x before 1.3.5 and 2.x before 2.3, in Internet2 Middleware Initiative Shibboleth allow remote attackers to inject arbitrary web script or HTML via URLs that are… | |
| Modificada | Media (5) | 1.6% | — | F-secure Anti-virusF-secure Internet SecurityF-secure Service Platform FOR Service Providers | 10/7/2006 | 16/6/2026 | F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename. | |
| Modificada | Media (5) | 1.6% | — | F-secure Anti-virusF-secure Internet SecurityF-secure Service Platform FOR Service Providers | 10/7/2006 | 16/6/2026 | F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when "Scan network drives" is disabled, which allows remote attackers to bypass anti-virus controls. | |
| Modificada | Media (5) | 59% | 💥 Exploit | Nortel IP Softphone 2050Nortel Media Communication Server 5100Nortel Media Communication Server 5200Nortel Media Processing Server+15 | 23/12/2004 | 16/6/2026 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number… |