Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3020▼ 63 respecto a la semana anterior
Críticas / altas1413▲ 57 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
16 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5) | 1.3% | — | Asterisk Open SourceCertified AsteriskAsterisk Business EditionAsterisk Digiumphones | 1/4/2013 | 16/6/2026 | The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits different behavior for… | |
| Modificada | Alta (9) | 3.6% | — | Asterisk Open SourceSangoma AsteriskCertified AsteriskAsterisk Digiumphones+1 | 31/8/2012 | 16/6/2026 | Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 allows remote authenticated… | |
| Modificada | Media (4) | 3.2% | — | Digium Asterisk Business EditionDigium AsteriskDigium AsteriskeDigium Certified Asterisk | 9/7/2012 | 16/6/2026 | channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a provisional response to a… | |
| Modificada | Media (6.8) | 1.0% | — | Cisco Unified Communications ManagerCisco Business Edition 3000 SoftwareCisco Business Edition 3000Cisco Business Edition 5000 Software+3 | 1/3/2012 | 16/6/2026 | SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allows remote attackers to… | |
| Modificada | Alta (7.8) | 1.3% | — | Cisco Unified Communications ManagerCisco Business Edition 3000 SoftwareCisco Business Edition 3000Cisco Business Edition 5000 Software+3 | 1/3/2012 | 16/6/2026 | Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allow remote attackers to cause a denial of service (device… | |
| Modificada | Media (5) | 2.7% | — | Asterisk Business EditionAsterisk Open SourceAsterisk S800i Appliance | 14/1/2009 | 16/6/2026 | IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account… | |
| Modificada | Media (4.3) | 2.0% | — | Asterisk Business EditionAsterisk Open Source | 17/12/2008 | 16/6/2026 | Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching. | |
| Modificada | Alta (7.8) | 3.4% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source | 24/7/2008 | 16/6/2026 | The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of… | |
| Modificada | Media (4.3) | 7.3% | — | Asterisk Business EditionAsterisk Open Source | 4/6/2008 | 16/6/2026 | Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the… | |
| Modificada | Media (4.3) | 2.7% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 23/4/2008 | 16/6/2026 | The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow unauthenticated calls,… | |
| Modificada | Alta (7.1) | 1.4% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 23/4/2008 | 16/6/2026 | The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a… | |
| Modificada | Alta (9.3) | 3.8% | — | AsteriskAsterisk Appliance Developer KITAsterisk Business EditionAsterisknow+1 | 24/3/2008 | 16/6/2026 | The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and s800i 1.0.x before 1.1.0.2 generates insufficiently random manager ID values, which makes it… | |
| Modificada | Alta (7.5) | 12% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 24/3/2008 | 16/6/2026 | Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a… | |
| Modificada | Alta (8.8) | 2.3% | — | AsteriskAsterisk Appliance Developer KITAsterisk Business EditionAsterisknow+2 | 20/3/2008 | 16/6/2026 | Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote… | |
| Modificada | Media (5) | 25% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 8/1/2008 | 16/6/2026 | The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message… | |
| Modificada | Media (4.3) | 2.0% | — | Asterisk Business EditionAsterisk Open Source | 20/12/2007 | 16/6/2026 | Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations ("realtime") and host-based authentication, does not check the IP address when the username is correct and there is no password, which allows… |