Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▲ 13 respecto a la semana anterior

Críticas / altas1459▲ 323 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2011-3014	Modificada	Media (5)	1.2%	—	Novell Data Synchronizer Novell Mobility Pack	9/8/2011	16/6/2026	The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation.
CVE-2011-3013	Modificada	Media (5)	1.2%	—	Novell Data Synchronizer Novell Mobility Pack	9/8/2011	16/6/2026	WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVE-2011-2224	Modificada	Media (4.3)	1.2%	—	Novell Data Synchronizer Novell Mobility Pack	9/8/2011	16/6/2026	The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
CVE-2011-2223	Modificada	Media (5)	1.4%	—	Novell Data Synchronizer Novell Mobility Pack	9/8/2011	16/6/2026	The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
CVE-2011-2222	Modificada	Media (4.3)	1.2%	—	Novell Data Synchronizer Novell Mobility Pack	9/8/2011	16/6/2026	Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to hijack web sessions via unspecified vectors.
CVE-2011-2221	Modificada	Media (5)	1.4%	—	Novell Data Synchronizer Novell Mobility Pack	9/8/2011	16/6/2026	The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain sensitive GroupWise information via unspecified vectors.
CVE-2011-1711	Modificada	Media (5.5)	1.3%	—	Novell Data Synchronizer Novell Mobility Pack	9/6/2011	16/6/2026	Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown vectors.