Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior

Críticas / altas1293▼ 208 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-16027	Aplazada	Media (5.4)	0.24%	—	Revenue Administration Turkiye E-signature^AI	7/8/2026	26/8/2026	Server-Side request forgery (SSRF) vulnerability in Revenue Administration Türkiye's E-Signature allows Server Side Request Forgery. This issue affects Türkiye's E-Signature: from 2.4.4.0 before 2.5.1.0.
CVE-2015-3406	Modificada	Alta (7.5)	2.3%	—	Module-signature Project Module-signature Canonical Ubuntu Linux	29/11/2019	17/6/2026	The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors.
CVE-2016-1000236	Modificada	Media (4.4)	0.90%	—	Cookie-signature Project Cookie-signature Debian Linux	19/11/2019	17/6/2026	Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.
CVE-2015-3409	Modificada	Alta (7.2)	0.41%	—	Module-signature Project Module-signature Canonical Ubuntu Linux	19/5/2015	17/6/2026	Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.
CVE-2015-3408	Modificada	Alta (10)	5.6%	—	Module-signature Project Module-signature Canonical Ubuntu Linux	19/5/2015	17/6/2026	Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
CVE-2015-3407	Modificada	Media (5)	2.3%	—	Canonical Ubuntu Linux Module-signature Project Module-signature	19/5/2015	17/6/2026	Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files.