Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3059▲ 556 respecto a la semana anterior

Críticas / altas1460▲ 282 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▲ 175 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-3701	Modificada	Alta (8.1)	1.5%	—	Redhat Edeploy Redhat Jboss Enterprise WEB Server	15/12/2019	17/6/2026	eDeploy has tmp file race condition flaws
CVE-2014-3699	Modificada	Crítica (9.8)	2.4%	—	Redhat Edeploy Redhat Jboss Enterprise WEB Server	15/12/2019	17/6/2026	eDeploy has RCE via cPickle deserialization of untrusted data
CVE-2014-3700	Modificada	Crítica (9.8)	2.8%	—	Redhat Edeploy Redhat Jboss Enterprise WEB Server	21/11/2019	17/6/2026	eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data
CVE-2018-1000403	Modificada	Alta (7.8)	0.34%	—	Jenkins AWS Codedeploy	9/7/2018	17/6/2026	Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to have been fixed in…
CVE-2018-1000402	Modificada	Media (4.3)	0.97%	—	Jenkins AWS Codedeploy	9/7/2018	17/6/2026	Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later.
CVE-2014-3702	Modificada	Crítica (9.1)	1.9%	—	Redhat Edeploy	16/10/2017	17/6/2026	Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.
CVE-2014-8174	Modificada	Crítica (9.8)	3.0%	—	Redhat Edeploy	19/9/2017	17/6/2026	eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.