Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2865▼ 160 respecto a la semana anterior

Críticas / altas1384▲ 52 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-49015	Analizada	Media (4.9)	0.23%	—	Couchbase .net SDK	18/6/2025	17/6/2026	The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly enabled by default.
CVE-2024-2637	Aplazada	Alta (7.2)	0.17%	—	B&R Industrial Automation Scene Viewer^AI B&R Industrial Automation Mapp Vision^AI B&R Industrial Automation Mapp View^AI B&R Industrial Automation Mapp Cockpit^AI+21	14/5/2024	17/6/2026	An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R Industrial Automation…
CVE-2023-0755	Modificada	Crítica (9.8)	12%	—	GE Digital Industrial Gateway Server PTC Kepware Server PTC Kepware Serverex PTC Thingworx .net-sdk+5	23/2/2023	17/6/2026	The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.
CVE-2023-0754	Modificada	Crítica (9.8)	2.9%	—	GE Digital Industrial Gateway Server PTC Kepware Server PTC Kepware Serverex PTC Thingworx .net-sdk+5	23/2/2023	17/6/2026	The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.