Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2556▼ 352 respecto a la semana anterior

Críticas / altas1335▲ 66 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)93▼ 434 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-49594	Modificada	Media (6.5)	1.2%	—	Michaelkelly Duouniversalkeycloakauthenticator	23/12/2023	17/6/2026	An information disclosure vulnerability exists in the challenge functionality of instipod DuoUniversalKeycloakAuthenticator 1.0.7 plugin. A specially crafted HTTP request can lead to a disclosure of sensitive information. A user logging into Keycloak using DuoUniversalKeycloakAuthenticator plugin triggers this…
CVE-2019-7443	Modificada	Alta (8.1)	2.4%	—	KDE Kauth Opensuse Leap Opensuse Backports Fedoraproject Fedora	7/5/2019	17/6/2026	KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of arbitrary images with dynamically loaded plugins. In other words, KAuth unintentionally causes this plugin code to run…
CVE-2017-8422	Modificada	Alta (7.8)	1.8%	—	KDE Kauth Kdelibs	17/5/2017	17/6/2026	KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
CVE-2014-5033	Modificada	Media (6.9)	0.36%	—	Debian Kde4libs Canonical Ubuntu Linux KDE Kauth Kdelibs	19/8/2014	17/6/2026	KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and…