Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2561▼ 316 respecto a la semana anterior
Críticas / altas1344▲ 80 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
–

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaCrítica (9.1)0.47%—Samsung Data Management Server Firmware29/7/202517/6/2026
An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.
AnalizadaCrítica (9.1)0.39%—Samsung Data Management Server Firmware29/7/202517/6/2026
An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.
AnalizadaMedia (6.5)0.34%—Samsung Data Management Server Firmware29/7/202517/6/2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create arbitrary files in unintended locations on the filesystem
AnalizadaMedia (4.9)0.46%—Samsung Data Management Server Firmware29/7/202517/6/2026
Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files
AnalizadaCrítica (9.8)0.38%—Samsung Data Management Server Firmware29/7/202517/6/2026
Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system
AnalizadaMedia (6.5)0.31%—Samsung Data Management Server Firmware29/7/202517/6/2026
An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability.