Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2632▼ 307 respecto a la semana anterior

Críticas / altas1348▲ 75 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 465 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2015-4230	Modificada	Alta (7.8)	3.4%	—	Cisco Headend System Release	6/7/2015	17/6/2026	Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91854.
CVE-2015-4227	Modificada	Alta (7.8)	3.4%	—	Cisco Headend System Release	30/6/2015	17/6/2026	Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91838.
CVE-2015-0747	Modificada	Media (4.3)	1.8%	—	Cisco Videoscape Conductor Cisco Headend Digital Broadband Delivery System Cisco Headend System Release	30/5/2015	17/6/2026	Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.
CVE-2015-0745	Modificada	Media (5)	1.9%	—	Cisco Headend Digital Broadband Delivery System Cisco Headend System Release	30/5/2015	17/6/2026	Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.
CVE-2015-0744	Modificada	Alta (7.8)	3.4%	—	Cisco DTA Control System Cisco Headend Digital Broadband Delivery System Cisco Headend System Release	30/5/2015	17/6/2026	Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and CSCus68315.
CVE-2015-0743	Modificada	Media (5)	2.0%	—	Cisco Headend Digital Broadband Delivery System Cisco Headend System Release	30/5/2015	17/6/2026	Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka Bug ID CSCus04097.