Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 546 respecto a la semana anterior

Críticas / altas1325▼ 174 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)268▼ 241 respecto a la semana anterior

156 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-16250	Modificada	Media (5.3)	0.85%	—	Mitel St14.2	13/3/2018	17/6/2026	A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used to identify valid user ids and associated user names.
CVE-2014-0160	Analizada	Alta (7.5)	100%	⚠ Explotación activa💥 Exploit	Openssl Filezilla-project Filezilla Server Siemens Application Processing Engine Firmware Siemens CP 1543-1 Firmware+24	7/4/2014	17/6/2026	The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to…
CVE-2008-6797	Modificada	Alta (7.8)	1.7%	—	Mitel Nupoint Messenger	7/5/2009	16/6/2026	The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network.
CVE-2004-0945	Modificada	Media (5)	1.6%	—	Mitel 3300 Integrated Communication Platform	28/2/2005	16/6/2026	The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a denial of service (resource exhaustion) via a large number of active sessions, which exceeds ICP's maximum.
CVE-2004-1934	Modificada	Alta (7.5)	8.3%	💥 Exploit	Isesam Gemitel	15/4/2004	16/6/2026	PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter.
CVE-2004-0944	Modificada	Media (5)	1.4%	—	Mitel 3300 Integrated Communications Platform^AI	28/2/2004	16/6/2026	The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie.