Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

83 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-3189	Modificada	Alta (7.5)	1.3%	—	Google Chrome Redhat Enterprise Linux Desktop Supplementary Redhat Enterprise Linux Server Supplementary Redhat Enterprise Linux Server Supplementary EUS+1	8/10/2014	17/6/2026	The chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via unknown vectors.
CVE-2014-3188	Modificada	Alta (10)	6.0%	—	Google Chrome OS Google Chrome Redhat Enterprise Linux Desktop Supplementary Redhat Enterprise Linux Server Supplementary+2	8/10/2014	17/6/2026	Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.
CVE-2013-5870	Modificada	Media (6.8)	4.8%	—	Redhat Enterprise Linux Desktop Supplementary Redhat Enterprise Linux HPC Node Supplementary Redhat Enterprise Linux Server Supplementary Redhat Enterprise Linux Server Supplementary AUS+6	15/1/2014	16/6/2026	Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
CVE-2014-0418	Modificada	Media (5.1)	6.3%	—	Redhat Enterprise Linux Desktop Supplementary Redhat Enterprise Linux HPC Node Supplementary Redhat Enterprise Linux Server Supplementary Redhat Enterprise Linux Server Supplementary AUS+6	15/1/2014	17/6/2026	Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0424.
CVE-2014-0382	Modificada	Media (4.3)	4.9%	—	Oracle JRE HP JDK HP JRE Redhat Enterprise Linux Desktop Supplementary+6	15/1/2014	17/6/2026	Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect availability via unknown vectors related to JavaFX.
CVE-2013-5906	Modificada	Media (5.1)	6.3%	—	Redhat Enterprise Linux Desktop Supplementary Redhat Enterprise Linux HPC Node Supplementary Redhat Enterprise Linux Server Supplementary Redhat Enterprise Linux Server Supplementary AUS+6	15/1/2014	16/6/2026	Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5905.
CVE-2013-5904	Modificada	Media (6.8)	4.9%	—	Oracle JRE Redhat Enterprise Linux Desktop Supplementary Redhat Enterprise Linux HPC Node Supplementary Redhat Enterprise Linux Server Supplementary+5	15/1/2014	16/6/2026	Unspecified vulnerability in Oracle Java SE 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVE-2013-5895	Modificada	Media (5)	5.7%	—	Redhat Enterprise Linux Desktop Supplementary Redhat Enterprise Linux HPC Node Supplementary Redhat Enterprise Linux Server Supplementary Redhat Enterprise Linux Server Supplementary AUS+6	15/1/2014	16/6/2026	Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.