Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2847▼ 151 respecto a la semana anterior
Críticas / altas1373▲ 54 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)267▼ 257 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.5% | — | Gnome KeyringDebian Linux | 20/12/2019 | 16/6/2026 | gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function | |
| Modificada | Alta (7.8) | 1.5% | — | Gnome KeyringCanonical Ubuntu LinuxOracle ZFS Storage Appliance KIT | 12/2/2019 | 17/6/2026 | In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext. | |
| Modificada | Alta (7.8) | 0.56% | — | Gnome-keyring | 18/11/2018 | 17/6/2026 | GNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the keyring is unlocked, a similar issue to CVE-2008-7320. One perspective is that this occurs because available D-Bus protection mechanisms (involving the busconfig and policy XML… | |
| Modificada | Media (4.4) | 0.48% | — | Gnome-keyring | 22/10/2012 | 16/6/2026 | GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows attackers to have an unspecified impact via unknown attack vectors. |