Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
83 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 1.3% | — | Tibco Managed File Transfer Command CenterTibco Managed File Transfer Internet ServerTibco Slingshot | 19/9/2011 | 16/6/2026 | Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors. | |
| Modificada | Media (4.3) | 1.3% | — | Tibco Managed File Transfer Command CenterTibco Managed File Transfer Internet ServerTibco Slingshot | 19/9/2011 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via unspecified… | |
| Modificada | Alta (7.5) | 2.6% | — | Arcserve BrightstorBroadcom Cleverpath PortalCleverpath Aion BPMCleverpath Portal+7 | 20/12/2006 | 16/6/2026 | Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are… | |
| Modificada | Media (5.5) | 8.3% | 💥 Exploit | Broadcom Etrust Security Command Center | 22/9/2006 | 16/6/2026 | Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, allows remote authenticated users to read and delete arbitrary files via ".." sequences in the eSCCAdHocHtmlFile parameter to eSMPAuditServlet, which is not properly handled by the getadhochtml… | |
| Modificada | Media (6.4) | 11% | 💥 Exploit | Broadcom Etrust Audit ClientBroadcom Etrust Audit DatatoolsBroadcom Etrust Audit Policy ManagerBroadcom Etrust Security Command Center | 22/9/2006 | 16/6/2026 | Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments. | |
| Modificada | Media (5) | 10% | 💥 Exploit | Broadcom Etrust Security Command Center | 22/9/2006 | 16/6/2026 | The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message. | |
| Modificada | Media (4.6) | 0.33% | — | Brent ELY Gnome Workstation Command Center | 16/9/2005 | 16/6/2026 | The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwcc_out.txt temporary file. | |
| Modificada | Alta (7.5) | 3.3% | 💥 Exploit | Applied Watch Technologies Applied Watch Command Center | 15/12/2003 | 16/6/2026 | Applied Watch Command Center allows remote attackers to conduct unauthorized activities without authentication, such as (1) add new users to a console, as demonstrated using appliedsnatch.c, or (2) add spurious IDS rules to sensors, as demonstrated using addrule.c. |