Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
127 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.5) | 5.3% | 💥 Exploit | Broadcom Symantec Data Center Security ServerSymantec Advanced Threat ProtectionSymantec CsapiSymantec Email Security.cloud+11 | 14/4/2017 | 17/6/2026 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint… | |
| Modificada | Media (5.5) | 6.9% | 💥 Exploit | Broadcom Symantec Data Center Security ServerSymantec Advanced Threat ProtectionSymantec CsapiSymantec Email Security.cloud+11 | 14/4/2017 | 17/6/2026 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint… | |
| Modificada | Media (5.8) | 1.9% | — | Cisco WEB Security ApplianceCisco Email Security Appliance Firmware | 22/2/2017 | 17/6/2026 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: This vulnerability… | |
| Modificada | Media (5.8) | 2.2% | — | Cisco Email Security Appliance Firmware | 3/2/2017 | 17/6/2026 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device, aka a Malformed MIME Header Filtering Bypass. This vulnerability affects all… | |
| Modificada | Media (5.8) | 1.5% | — | Cisco Email Security Appliance | 26/1/2017 | 17/6/2026 | A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. Affected Products: This vulnerability affects all releases prior to the first fixed release… | |
| Modificada | Media (6.1) | 1.3% | — | Cisco Email Security Appliance | 14/12/2016 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting (XSS) attack against a user of the affected interface on an affected device. More Information: CSCvb37346. Known Affected… | |
| Modificada | Media (4.3) | 1.6% | — | Cisco Email Security Appliance | 14/12/2016 | 17/6/2026 | A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances and Cisco Web Security Appliances could allow an unauthenticated, remote attacker to bypass user filters that are configured for an affected device. Affected Products: This vulnerability affects all… | |
| Modificada | Media (5.9) | 1.1% | — | Cisco Content Security Management ApplianceCisco Email Security ApplianceCisco WEB Security Appliance | 14/12/2016 | 17/6/2026 | A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management Security Appliance (SMA) could allow an unauthenticated, remote attacker to impersonate the update server. More Information: CSCul88715,… | |
| Modificada | Media (5.3) | 1.1% | — | Cisco Email Security Appliance Firmware | 19/11/2016 | 17/6/2026 | A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection (AMP) filters that are configured for an affected device. This vulnerability affects all releases prior to the first… | |
| Modificada | Media (5.3) | 2.0% | — | Cisco Email Security Appliance Firmware | 19/11/2016 | 17/6/2026 | A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection (AMP) filters that are configured for an affected device. This vulnerability affects all releases prior to the first… | |
| Modificada | Alta (7.5) | 2.2% | — | Cisco Email Security Appliance Firmware | 19/11/2016 | 17/6/2026 | A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass content filters configured on an affected device. Email that should have been filtered could instead be forwarded by the device. This… | |
| Modificada | Alta (7.5) | 1.6% | — | Cisco Email Security ApplianceCisco WEB Security ApplianceCisco WEB Security Appliance 8.0.5 | 28/10/2016 | 17/6/2026 | A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of… | |
| Modificada | Alta (7.5) | 2.2% | — | Cisco Email Security ApplianceCisco WEB Security Appliance | 28/10/2016 | 17/6/2026 | A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition due to the AMP process unexpectedly restarting. Affected Products: Cisco AsyncOS Software… | |
| Modificada | Alta (7.5) | 1.7% | — | Cisco Email Security Appliance | 28/10/2016 | 17/6/2026 | A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition when the FTP application unexpectedly quits. More Information: CSCux68539. Known Affected Releases: 9.1.0-032 9.7.1-000. Known Fixed Releases:… | |
| Modificada | Alta (7.5) | 2.4% | — | Cisco Email Security Appliance | 28/10/2016 | 17/6/2026 | A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass a configured drop filter by using an email with a corrupted attachment. More Information: CSCuz01651. Known Affected… | |
| Modificada | Alta (7.5) | 3.0% | — | Cisco Email Security Appliance | 28/10/2016 | 17/6/2026 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) condition. Affected Products: This… | |
| Modificada | Alta (7.5) | 3.0% | — | Cisco Email Security Appliance | 28/10/2016 | 17/6/2026 | A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of… | |
| Modificada | Alta (7.5) | 3.0% | — | Cisco Email Security Appliance | 28/10/2016 | 17/6/2026 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.Affected Products: This vulnerability affects all releases prior to the first fixed… | |
| Modificada | Alta (7.5) | 2.4% | — | Cisco Email Security Appliance | 28/10/2016 | 17/6/2026 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: all releases prior to the… | |
| Modificada | Media (6.1) | 1.5% | — | Cisco Email Security Appliance | 28/10/2016 | 17/6/2026 | A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate a cross-site… | |
| Modificada | Media (5.9) | 2.0% | — | Cisco Content Security Management ApplianceCisco Email Security ApplianceCisco WEB Security Appliance | 5/10/2016 | 17/6/2026 | The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote attackers to cause a denial of service via a flood of FTP traffic, aka Bug IDs… | |
| Modificada | Crítica (9.8) | 3.6% | — | Cisco Email Security Appliance Firmware | 22/9/2016 | 17/6/2026 | Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices, when Enrollment Client before 1.0.2-065 is installed, allows remote attackers to obtain root access via a connection to the testing/debugging interface, aka Bug… | |
| Modificada | Alta (7.5) | 3.4% | — | ClamavCisco Email Security ApplianceCisco WEB Security Appliance | 8/6/2016 | 17/6/2026 | libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco Email Security Appliance Firmeware | 12/2/2016 | 17/6/2026 | The proxy engine in Cisco Advanced Malware Protection (AMP), when used with Email Security Appliance (ESA) 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338. | |
| Modificada | Alta (7.8) | 2.8% | — | Cisco WEB Security ApplianceCisco Content Security Management ApplianceCisco Email Security Appliance | 6/11/2015 | 17/6/2026 | Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Appliance (SMA) devices; and before 7.7.0-725 and 8.x before… |