Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2950▲ 8 respecto a la semana anterior
Críticas / altas1450▲ 184 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (10) | 1.4% | — | Kdebase | 6/9/2006 | 16/6/2026 | The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times. | |
| Modificada | Baja (2.1) | 0.37% | — | Gnome GDMRedhat Kdebase | 27/8/2003 | 16/6/2026 | GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file. | |
| Modificada | Media (5) | 1.5% | — | Gnome GDMRedhat KdebaseRedhat Enterprise LinuxRedhat Linux Advanced Workstation | 27/8/2003 | 16/6/2026 | The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549. | |
| Modificada | Media (5) | 2.9% | — | KDE KonquerorKDE Konqueror EmbeddedRedhat Analog Real-time SynthesizerRedhat Kdebase+4 | 27/8/2003 | 16/6/2026 | KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites. | |
| Modificada | Media (5) | 1.5% | — | Gnome GDMRedhat KdebaseRedhat Enterprise LinuxRedhat Linux Advanced Workstation | 27/8/2003 | 16/6/2026 | The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name. |