Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2556▼ 352 respecto a la semana anterior

Críticas / altas1335▲ 66 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)93▼ 434 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2004-0774	Modificada	Alta (7.8)	1.9%	—	Realnetworks Helix Universal Mobile Server AND Gateway Realnetworks Helix Universal Server	3/11/2004	16/6/2026	RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.
CVE-2004-0389	Modificada	Alta (7.5)	55%	—	Realnetworks Helix Universal Server	1/6/2004	16/6/2026	RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.
CVE-2004-0049	Modificada	Media (6.8)	1.5%	—	Realnetworks Helix Universal Mobile Server Realnetworks Helix Universal Server	17/2/2004	16/6/2026	Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.
CVE-2003-0725	Modificada	Alta (7.5)	49%	—	Realnetworks Helix Universal Server Realnetworks Realserver	20/10/2003	16/6/2026	Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.
CVE-2002-1643	Modificada	Alta (7.5)	75%	—	Realnetworks Helix Universal Server	19/12/2002	16/6/2026	Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.