Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior

Críticas / altas1403▲ 41 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-2496	Modificada	Alta (9.3)	29%	—	Microsoft Biztalk Server Microsoft Internet Security AND Acceleration Server Microsoft Office Microsoft Office WEB Components+1	12/8/2009	16/6/2026	Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1,…
CVE-2009-0237	Modificada	Media (4.3)	23%	—	Microsoft Forefront Threat Management Gateway Microsoft Internet Security AND Acceleration Server	15/4/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2006, 2006 Supportability Update, and 2006 SP1; allows remote attackers to…
CVE-2009-0077	Modificada	Media (5)	78%	—	Microsoft Forefront Threat Management Gateway Microsoft Internet Security AND Acceleration Server	15/4/2009	16/6/2026	The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote attackers to cause a…
CVE-2007-1201	Modificada	Alta (9.3)	29%	—	Microsoft Biztalk Server Microsoft Commerce Server Microsoft Internet Security AND Acceleration Server Microsoft Office+1	11/3/2008	16/6/2026	Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."