Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior

Críticas / altas1381▼ 36 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2004-1483	Modificada	Alta (10)	2.4%	—	Symantec Clientless VPN Gateway 4400	31/12/2004	16/6/2026	Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact.
CVE-2004-0079	Modificada	Alta (7.5)	9.5%	—	Cisco Firewall Services Module HP AAA Server HP Apache-based WEB Server Symantec Clientless VPN Gateway 4400+62	23/11/2004	16/6/2026	The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVE-2004-0081	Modificada	Media (5)	7.2%	—	Cisco Firewall Services Module HP AAA Server HP Apache-based WEB Server Symantec Clientless VPN Gateway 4400+62	23/11/2004	16/6/2026	OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVE-2004-0112	Modificada	Media (5)	10%	—	Cisco Firewall Services Module HP AAA Server HP Apache-based WEB Server Symantec Clientless VPN Gateway 4400+61	23/11/2004	16/6/2026	The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.