Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2624▼ 224 respecto a la semana anterior

Críticas / altas1373▲ 143 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2013-6831	Modificada	Alta (7.2)	1.0%	—	Pineapp Mail-secure 5099sk	20/11/2013	17/6/2026	PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account.
CVE-2013-6830	Modificada	Alta (7.5)	8.9%	—	Pineapp Mail-secure 5099sk	20/11/2013	17/6/2026	admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation.
CVE-2013-6829	Modificada	Alta (7.5)	80%	—	Pineapp Mail-secure	20/11/2013	17/6/2026	admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation.
CVE-2013-6828	Modificada	Media (6.4)	1.3%	—	Pineapp Mail-secure	20/11/2013	17/6/2026	admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sys_usermng operation via the it parameter.
CVE-2013-6827	Modificada	Media (5)	1.4%	—	Pineapp Mail-secure	20/11/2013	17/6/2026	Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote attackers to read arbitrary files via a full pathname in the msg parameter.
CVE-2013-4987	Modificada	Alta (8.5)	2.6%	—	Pineapp Mail-secure	8/11/2013	16/6/2026	PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command.