Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3027▼ 69 respecto a la semana anterior
Críticas / altas1424▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (5.5)0.24%—Advanced Intrusion Detection Environment Project Advanced Intrusion Detection Environment14/8/202517/6/2026
AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a…
ModificadaMedia (5.5)0.23%—Advanced Intrusion Detection Environment Project Advanced Intrusion Detection Environment14/8/202517/6/2026
AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamper with the log…
ModificadaAlta (7.8)0.49%—Advanced Intrusion Detection Environment Project Advanced Intrusion Detection EnvironmentRedhat Ovirt-nodeRedhat Virtualization HostRedhat Enterprise Linux+320/1/202217/6/2026
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.
ModificadaMedia (4.6)0.41%—Freebsd Advanced Intrusion Detection Environment31/12/200216/6/2026
The default aide.conf file in Advanced Intrusion Detection Environment (AIDE) before 0.7_1 on FreeBSD before 2002-08-28 does not properly check subdirectories, which could allow local users to bypass detection.