Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2586▼ 299 respecto a la semana anterior
Críticas / altas1355▲ 100 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 0.23% | — | Simplisafe U9k-es1000 FirmwareSimplisafe U9k-kr1 FirmwareSimplisafe U9k-ms1000 FirmwareSimplisafe U9k-wt1000 Firmware | 24/5/2018 | 17/6/2026 | SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur. | |
| Modificada | Media (5) | 5.1% | — | Sophos Es1000Sophos Es4000Sophos Anti-virusSophos Puremessage Anti-virus | 15/7/2008 | 16/6/2026 | Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments. | |
| Modificada | Media (4.3) | 4.2% | — | Sophos Es1000Sophos Es4000 | 20/2/2008 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) error and (2) go parameters to the login page. |