Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2740▼ 483 respecto a la semana anterior

Críticas / altas1302▼ 188 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

156 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2000-0259	Modificada	Alta (7.2)	1.5%	—	Microsoft Terminal Server Microsoft Windows NT	12/4/2000	16/6/2026	The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.
CVE-2000-0232	Modificada	Baja (2.1)	3.5%	💥 Exploit	Microsoft Terminal Server Microsoft Windows 2000 Microsoft Windows NT	30/3/2000	16/6/2026	Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request.
CVE-1999-0909	Modificada	Alta (7.5)	12%	—	Microsoft Terminal Server Microsoft Windows 95 Microsoft Windows 98se Microsoft Windows NT	20/9/1999	16/6/2026	Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.
CVE-1999-0680	Modificada	Media (5)	5.7%	—	Microsoft Terminal Server	9/8/1999	16/6/2026	Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.
CVE-1999-0391	Modificada	Alta (7.5)	4.9%	—	Microsoft Terminal Server Microsoft Windows 2000 Microsoft Windows NT	5/1/1999	16/6/2026	The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
CVE-1999-1257	Modificada	Alta (7.5)	1.6%	—	Maxserver Xyplex Terminal Server	26/11/1997	16/6/2026	Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z character, or (2) a ? (question mark).