Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2528▼ 418 respecto a la semana anterior

Críticas / altas1311▲ 21 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)99▼ 428 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-25259	Aplazada	Media (5.1)	0.17%	—	Leica Geosystems Gr10^AI Leica Geosystems Gr25^AI Leica Geosystems Gr30^AI Leica Geosystems Gr50^AI	8/1/2026	17/6/2026	Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation. Attackers can trick logged-in users into executing unauthorized actions by crafting malicious web pages that submit requests to the…
CVE-2018-25131	Aplazada	Media (5.1)	0.28%	—	Leica Geosystems Gr10^AI Leica Geosystems Gr25^AI Leica Geosystems Gr30^AI Leica Geosystems Gr50^AI	24/12/2025	17/6/2026	Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configuration file upload functionality. Attackers can upload a malicious HTML file to that executes arbitrary JavaScript in a user's browser session when viewed.
CVE-2008-2172	Modificada	Alta (7.1)	1.6%	—	Hitachi Gr2000 Hitachi Gr3000 Hitachi Gr4000	13/5/2008	16/6/2026	Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.
CVE-2008-2169	Modificada	Alta (7.5)	1.5%	—	Avici Router Hitachi Gr2000 Hitachi Gr3000 Hitachi Gr4000	13/5/2008	16/6/2026	Unspecified vulnerability in Avici routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.
CVE-2005-0356	Modificada	Media (5)	83%	—	Cisco Agent Desktop Cisco E-mail Manager Cisco Emergency Responder Cisco Intelligent Contact Manager+72	31/5/2005	16/6/2026	Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.