Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2727▼ 85 respecto a la semana anterior

Críticas / altas1416▲ 186 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)101▼ 398 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2007-2435	Modificada	Alta (10)	5.0%	—	SUN Java Enterprise System SUN JRE SUN SDK	2/5/2007	16/6/2026	Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.
CVE-2006-3127	Modificada	Alta (7.8)	3.2%	—	SUN Java Enterprise System SUN Java System Directory Server	21/6/2006	16/6/2026	Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to cause a denial of service (memory consumption) by performing a large number of RSA cryptographic operations.
CVE-2004-0826	Modificada	Alta (7.5)	23%	—	Mozilla Network Security Services Netscape Certificate Server Netscape Directory Server Netscape Enterprise Server+6	31/12/2004	16/6/2026	Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.