Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior
Críticas / altas1324▼ 116 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior
405 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Baja (3.5) | 3.1% | — | Canonical Ubuntu LinuxDebian LinuxFedoraproject FedoraOracle Solaris+12 | 21/1/2015 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key. | |
| Modificada | Baja (3.5) | 7.1% | — | Canonical Ubuntu LinuxRedhat Enterprise Linux DesktopRedhat Enterprise Linux EUSRedhat Enterprise Linux Server+12 | 21/1/2015 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML. | |
| Modificada | Baja (2.1) | 0.56% | — | Linux KernelRedhat Enterprise Linux AUSRedhat Enterprise Linux DesktopRedhat Enterprise Linux EUS+15 | 9/1/2015 | 17/6/2026 | The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD. | |
| Modificada | Baja (2.1) | 0.46% | — | Linux KernelRedhat Enterprise Linux AUSRedhat Enterprise Linux DesktopRedhat Enterprise Linux EUS+15 | 9/1/2015 | 17/6/2026 | The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image. | |
| Modificada | Media (5.5) | 0.74% | — | Linux KernelCanonical Ubuntu LinuxNovell Suse Linux Enterprise DesktopNovell Suse Linux Enterprise Server+7 | 10/11/2014 | 17/6/2026 | The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and system hang) via a crafted application. | |
| Modificada | Media (5.5) | 0.52% | — | Linux KernelNovell Suse Linux Enterprise DesktopNovell Suse Linux Enterprise ServerOpensuse Evergreen+6 | 10/11/2014 | 17/6/2026 | arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm… | |
| Modificada | Alta (7.5) | 8.6% | — | Linux KernelRedhat Enterprise MRGCanonical Ubuntu LinuxDebian Linux+8 | 10/11/2014 | 17/6/2026 | The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter. | |
| Modificada | Alta (7.5) | 7.5% | — | Linux KernelRedhat Enterprise LinuxRedhat Enterprise MRGCanonical Ubuntu Linux+6 | 10/11/2014 | 17/6/2026 | The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c. | |
| Modificada | Media (4) | 2.4% | — | Oracle MysqlSuse Linux Enterprise DesktopSuse Linux Enterprise ServerSuse Linux Enterprise Software Development KIT+2 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML. | |
| Modificada | Media (4.3) | 4.6% | — | Juniper Junos SpaceMariadbOracle SolarisOracle Mysql+4 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING. | |
| Modificada | Media (6.5) | 3.9% | — | MariadbOracle MysqlSuse Linux Enterprise DesktopSuse Linux Enterprise Server+2 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML. | |
| Modificada | Baja (2.1) | 0.39% | — | Oracle SolarisOracle MysqlMariadbSuse Linux Enterprise Desktop+3 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN. | |
| Modificada | Media (6.5) | 2.7% | — | Oracle SolarisOracle MysqlMariadbSuse Linux Enterprise Desktop+3 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUMP. | |
| Modificada | Media (4) | 2.6% | — | Oracle MysqlSuse Linux Enterprise DesktopSuse Linux Enterprise ServerSuse Linux Enterprise Software Development KIT+2 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL. | |
| Modificada | Media (4.3) | 7.3% | — | MariadbOracle SolarisOracle MysqlSuse Linux Enterprise Desktop+3 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML. | |
| Modificada | Media (4) | 2.7% | — | Oracle MysqlSuse Linux Enterprise DesktopSuse Linux Enterprise ServerSuse Linux Enterprise Software Development KIT+2 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE. | |
| Modificada | Media (4.3) | 4.3% | — | Juniper Junos SpaceOracle SolarisMariadbOracle Mysql+4 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494. | |
| Modificada | Media (4.3) | 3.0% | — | Oracle MysqlOracle SolarisJuniper Junos SpaceMariadb+4 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL. | |
| Modificada | Media (4.3) | 4.8% | — | MariadbOracle SolarisJuniper Junos SpaceOracle Mysql+4 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496. | |
| Modificada | Media (4) | 2.7% | — | Oracle MysqlSuse Linux Enterprise DesktopSuse Linux Enterprise ServerSuse Linux Enterprise Software Development KIT+2 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML. | |
| Modificada | Media (4.3) | 2.6% | — | Juniper Junos SpaceOracle MysqlOracle SolarisMariadb+4 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL. | |
| Modificada | Baja (3.5) | 1.4% | — | Oracle MysqlMariadbSuse Linux Enterprise DesktopSuse Linux Enterprise Server+2 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED. | |
| Modificada | Media (6.8) | 4.4% | — | MariadbOracle MysqlOracle SolarisSuse Linux Enterprise Desktop+3 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER. | |
| Modificada | Media (4) | 4.1% | — | Oracle MysqlSuse Linux Enterprise DesktopSuse Linux Enterprise ServerSuse Linux Enterprise Software Development KIT+2 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS. | |
| Modificada | Baja (3.3) | 2.8% | — | Oracle SolarisOracle MysqlSuse Linux Enterprise DesktopSuse Linux Enterprise Server+3 | 15/10/2014 | 17/6/2026 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML. |