Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior

Críticas / altas1383▼ 38 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior

155 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-6754	Modificada	Media (5.4)	0.27%	—	Vector Outage Manager	28/9/2014	17/6/2026	The Vector Outage Manager (aka nz.co.vector.outagemanager) application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2013-5019	Modificada	Alta (10)	64%	💥 Exploit	Vector Ultra Mini Httpd	31/7/2013	16/6/2026	Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request.
CVE-2011-1229	Modificada	Alta (7.2)	1.5%	—	Microsoft Windows 2003 Server Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008+31	13/4/2011	16/6/2026	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different…
CVE-2009-2377	Modificada	Media (4.3)	1.9%	💥 Exploit	Avax-software Avax Vector Activex	8/7/2009	16/6/2026	Buffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector ActiveX 1.3 allows remote attackers to cause a denial of service (application crash) via a long PrinterName property.
CVE-2007-3459	Modificada	Media (6.4)	2.9%	💥 Exploit	Civiltech Avax Vector Activex	27/6/2007	16/6/2026	A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the WriteMovie method.