Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2011-4436	Modificada	Baja (3.5)	0.74%	—	Dell Kace K2000 Systems Deployment Appliance	12/11/2011	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-4048	Modificada	Media (4.3)	1.1%	—	Dell Kace K2000 Systems Deployment Appliance	12/11/2011	16/6/2026	The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials.
CVE-2011-4047	Modificada	Alta (9.3)	3.3%	—	Dell Kace K2000 Systems Deployment Appliance	12/11/2011	16/6/2026	The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging database write access.
CVE-2011-4046	Modificada	Media (5)	1.3%	—	Dell Kace K2000 Systems Deployment Appliance	12/11/2011	16/6/2026	The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by examining script source code.
CVE-2011-1672	Modificada	Media (5)	2.5%	—	Dell Kace K2000 Systems Deployment Appliance	10/4/2011	16/6/2026	The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or (2) sysprep.inf file, as demonstrated by reading a password.