Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2732▼ 9 respecto a la semana anterior
Críticas / altas1276▼ 237 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)230▲ 212 respecto a la semana anterior
–

1388 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (10)2.2%—Netscape Enterprise ServerNetscape Fasttrack ServerNetscape Proxy ServerSCO Unixware12/3/200116/6/2026
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
ModificadaAlta (7.2)1.2%💥 ExploitLBL TracerouteSunos19/12/200023/9/2026
Desbordamiento de montículo en la función savestr en LBNL traceroute 1.4a5 y versiones anteriores permite a un usuario local ejecutar comandos arbitrarios a través de la opción -g.
ModificadaAlta (7.5)2.5%💥 ExploitNetscape Enterprise ServerNetscape Fasttrack Server4/1/200016/6/2026
Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
ModificadaBaja (2.6)0.28%—Paul Kranenburg StraceLinux Kernel25/12/199916/6/2026
strace allows local users to read arbitrary files via memory mapped file names.
ModificadaAlta (10)3.4%—Netscape Enterprise ServerNetscape Fasttrack Server1/12/199916/6/2026
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
ModificadaMedia (5)5.8%💥 ExploitTeamshare Teamtrack1/10/199916/6/2026
TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
ModificadaMedia (5)1.1%—Austin Contract Computing Merchant Order Form1/4/199916/6/2026
An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.
ModificadaMedia (5)1.6%—Seapine Software Testtrack8/3/199916/6/2026
Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data.
ModificadaAlta (7.2)0.33%—IBM Tivoli OPC Tracker Agent2/10/199816/6/2026
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable), which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.
ModificadaMedia (5)1.3%—IBM Tivoli OPC Tracker Agent2/10/199816/6/2026
IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed data to the localtracker client port (5011), which prevents the connection from being closed properly.
ModificadaMedia (5)7.6%—C2net Stonghold WEB ServerHP Open Market Secure WebserverMicrosoft Exchange ServerMicrosoft Internet Information Server+926/6/199816/6/2026
Information from SSL-encrypted sessions via PKCS #1.
ModificadaAlta (7)19%—Microsoft FrontpageMicrosoft Internet Information ServerMicrosoft Personal WEB ServerNetscape Enterprise Server+16/2/199816/6/2026
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
ModificadaAlta (7.5)7.6%💥 ExploitNetscape Fasttrack Server1/1/199816/6/2026
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.