Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3071▲ 536 respecto a la semana anterior

Críticas / altas1456▲ 257 respecto a la semana anterior

Nueva explotación activa (KEV)8▼ 2 respecto a la semana anterior

Sin puntuar (sin CVSS)384▲ 177 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-1219	Modificada	Media (5)	8.7%	—	SUN Java System Calendar Server SUN ONE Calendar Server	1/4/2009	16/6/2026	Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.
CVE-2009-1218	Modificada	Media (4.3)	4.4%	—	SUN Java System Calendar Server SUN ONE Calendar Server	1/4/2009	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via (1) the fmt-out parameter to login.wcap or (2) the date parameter to…
CVE-2008-2749	Modificada	Alta (7.1)	2.5%	—	SUN Java System Calendar Server SUN ONE Calendar Server	18/6/2008	16/6/2026	Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.http.commandlog.all) is enabled, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
CVE-2004-0742	Modificada	Alta (10)	4.5%	—	SUN Java System Calendar Server	27/7/2004	16/6/2026	Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view.