Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2715▼ 529 respecto a la semana anterior
Críticas / altas1290▼ 220 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.1) | 2.2% | — | IBM Global Security KITIBM Security Directory ServerIBM Tivoli Directory Server | 27/1/2014 | 17/6/2026 | IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain. | |
| Modificada | Alta (7.8) | 3.2% | — | IBM Content Manager Ondemand FOR MultiplatformsIBM Global Security KITIBM Security Access Manager FOR WEB | 17/12/2013 | 17/6/2026 | IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshake during resumption of an SSLv2 session. | |
| Modificada | Alta (7.5) | 1.6% | — | IBM Global Security KITIBM Rational Directory ServerIBM Tivoli Directory Server | 8/8/2012 | 16/6/2026 | IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving… | |
| Modificada | Media (5) | 3.9% | — | IBM Global Security KITIBM Rational Directory ServerIBM Tivoli Directory Server | 8/8/2012 | 16/6/2026 | IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of… | |
| Modificada | Media (5) | 1.8% | — | Bsafe Global Security | 2/5/2005 | 16/6/2026 | Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. |