Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-2716	Modificada	Alta (7.5)	2.2%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server.
CVE-2006-2713	Modificada	Media (5)	1.9%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote attackers to determine the CEID of a protected asset, which can be used in other attacks against AVR.
CVE-2006-2705	Modificada	Media (5)	2.2%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an unspecified denial of service via a large number of forged client registration messages.
CVE-2006-2704	Modificada	Media (5)	2.1%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR server and client (aka C5 EVM) before 2.8.1 send messages in cleartext, which allows remote attackers to read sensitive vulnerability information.
CVE-2006-2717	Modificada	Media (4)	1.9%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows authenticated attackers to overwrite arbitrary files (1) on a server during an update or (2) on a client via modified pathnames, possibly due to a directory traversal issue.
CVE-2006-2714	Modificada	Media (5)	1.9%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID.
CVE-2006-2715	Modificada	Alta (7.5)	2.2%	—	Secure Elements C5 Enterprise Vulnerability Management	31/5/2006	16/6/2026	The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console.