Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior

Críticas / altas1288▼ 199 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

106 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-15539	Modificada	Alta (8.8)	0.58%	—	Agentejo Cockpit	15/10/2018	17/6/2026	Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc.
CVE-2018-15538	Modificada	Media (6.1)	0.84%	—	Agentejo Cockpit	15/10/2018	17/6/2026	Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities.
CVE-2018-11471	Modificada	Media (5.4)	0.55%	—	Getcockpit Cockpit	25/5/2018	17/6/2026	Cockpit 0.5.5 has XSS via a collection, form, or region.
CVE-2018-9302	Modificada	Crítica (9.1)	8.5%	💥 Exploit	Getcockpit Cockpit	2/5/2018	17/6/2026	SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14611, which was about version 0.13.0, which…
CVE-2017-14611	Modificada	Crítica (9.1)	1.9%	—	Agentejo Cockpit	10/4/2018	17/6/2026	SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of the discontinued aheinze/fetch_url_contents component.
CVE-2014-1861	Modificada	Alta (9.3)	1.4%	—	Jetroplatforms Jetro Cockpit Secure Browsing	18/2/2014	17/6/2026	The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName element in an RDP_FILE_TRANSFER document, which allows remote JCSB servers to execute arbitrary programs by providing a .EXE extension.