Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3034▼ 62 respecto a la semana anterior

Críticas / altas1427▲ 61 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-29500	Modificada	Alta (7.5)	0.60%	—	Bubble Fireworks Project Bubble Fireworks	4/6/2021	17/6/2026	bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs.
CVE-2019-5014	Modificada	Media (6.5)	0.65%	—	Wincofireworks Fw-1007 Firmware	8/5/2019	17/6/2026	An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability.
CVE-2005-4708	Modificada	Alta (7.2)	1.2%	—	Adobe Captivate Adobe Contribute Adobe Director Adobe Dreamweaver+5	31/12/2005	16/6/2026	Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.