Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3026▼ 51 respecto a la semana anterior
Críticas / altas1412▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)385▼ 125 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 2.5% | — | CA Host-based Intrusion Prevention SystemCA Internet Security Suite 2010CA Internet Security Suite 2011 | 25/2/2011 | 16/6/2026 | The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010, allows remote attackers to download an… | |
| Modificada | Media (5) | 1.6% | — | CA Host-based Intrusion Prevention System | 19/8/2009 | 16/6/2026 | kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet. | |
| Modificada | Media (5) | 2.0% | — | Computer Associates Host Based Intrusion Prevention SystemComputer Associates Internet Security SuiteComputer Associates Personal Firewall | 12/8/2008 | 16/6/2026 | Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation." | |
| Modificada | Alta (7.2) | 0.42% | — | Broadcom Internet Security SuiteCA Host Based Intrusion Prevention SystemCA Internet Security Suite 2008CA Personal Firewall 2007+1 | 12/8/2008 | 16/6/2026 | The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request. | |
| Modificada | Media (4.3) | 2.4% | — | Broadcom Host-based Intrusion Prevention System | 22/10/2007 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer. | |
| Modificada | Alta (7.2) | 1.1% | — | CA Host-based Intrusion Prevention System | 24/1/2007 | 16/6/2026 | Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers. |