Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 345 respecto a la semana anterior

Críticas / altas1316▼ 9 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 273 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-3085	Modificada	Alta (7.1)	7.6%	—	IBM Global Console Manager 16 Firmware IBM Global Console Manager 32 Firmware	17/8/2014	17/6/2026	systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the lpres parameter.
CVE-2014-3081	Modificada	Media (6.3)	4.1%	—	IBM Global Console Manager 16 Firmware IBM Global Console Manager 32 Firmware	17/8/2014	17/6/2026	prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter.
CVE-2014-3080	Modificada	Media (4.3)	3.5%	—	IBM Global Console Manager 16 Firmware IBM Global Console Manager 32 Firmware	17/8/2014	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to kvm.cgi or (2) the key parameter to avctalert.php.
CVE-2013-0526	Modificada	Alta (8.5)	6.1%	—	IBM Global Console Manager 16 Firmware IBM Global Console Manager 32 Firmware	21/8/2013	16/6/2026	ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) count or (2) size parameter.