Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-40982	Modificada	Media (6.5)	3.0%	—	Redhat Enterprise Linux XEN Intel Microcode Intel Xeon E-2314 Firmware+530	11/8/2023	17/6/2026	Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2020-11868	Modificada	Alta (7.5)	2.1%	—	NTP Redhat Enterprise Linux Netapp Data Ontap Netapp HCI Management Node+13	17/4/2020	17/6/2026	ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.
CVE-2019-17274	Modificada	Alta (7.8)	0.58%	—	Netapp Fabric-attached Storage 8700 Firmware Netapp Fabric-attached Storage 8300 Firmware Netapp ALL Flash Fabric-attached Storage A400 Firmware	26/2/2020	17/6/2026	NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access.