Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior

Críticas / altas1415▲ 65 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2015-0759	Modificada	Media (6.8)	0.90%	—	Cisco Headend Digital Broadband Delivery System	2/6/2015	17/6/2026	Cross-site request forgery (CSRF) vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users.
CVE-2015-0747	Modificada	Media (4.3)	1.8%	—	Cisco Videoscape Conductor Cisco Headend Digital Broadband Delivery System Cisco Headend System Release	30/5/2015	17/6/2026	Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.
CVE-2015-0745	Modificada	Media (5)	1.9%	—	Cisco Headend Digital Broadband Delivery System Cisco Headend System Release	30/5/2015	17/6/2026	Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.
CVE-2015-0744	Modificada	Alta (7.8)	3.4%	—	Cisco DTA Control System Cisco Headend Digital Broadband Delivery System Cisco Headend System Release	30/5/2015	17/6/2026	Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and CSCus68315.
CVE-2015-0743	Modificada	Media (5)	2.0%	—	Cisco Headend Digital Broadband Delivery System Cisco Headend System Release	30/5/2015	17/6/2026	Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka Bug ID CSCus04097.
CVE-2015-0733	Modificada	Media (4.3)	1.5%	—	Cisco Headend Digital Broadband Delivery System	30/5/2015	17/6/2026	CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks, via a crafted request, aka Bug ID CSCur25580.
CVE-2015-0724	Modificada	Media (4.3)	1.5%	—	Cisco Headend Digital Broadband Delivery System	15/5/2015	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in dncs 7.0.0.12 in Cisco Headend Digital Broadband Delivery System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCur25604.