Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 224 respecto a la semana anterior

Críticas / altas1384▲ 157 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2005-0373	Modificada	Alta (7.5)	3.9%	—	Cyrus Sasl Openpkg Suse Cvsup Conectiva Linux+4	7/10/2004	16/6/2026	Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
CVE-2004-2133	Modificada	Media (4.6)	0.61%	—	Cvsup	29/1/2004	16/6/2026	Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories such as /usr/src/packages.
CVE-2003-0606	Modificada	Media (4.6)	0.32%	—	Cvsup-mirror SUP	27/8/2003	16/6/2026	sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
CVE-2002-2382	Modificada	Alta (7.2)	0.31%	—	Cvsup	31/12/2002	16/6/2026	cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.