Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2533▼ 411 respecto a la semana anterior

Críticas / altas1305▲ 22 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)59▼ 467 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-14102	Modificada	Alta (7.8)	0.37%	—	Mimedefang	1/9/2017	17/6/2026	MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by the…
CVE-2007-0884	Modificada	Alta (7.5)	3.5%	—	Roaring Penguin Mimedefang	12/2/2007	16/6/2026	Buffer overflow in Roaring Penguin MIMEDefang 2.59 and 2.60 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors.
CVE-2004-1098	Modificada	Alta (7.5)	1.6%	—	Roaring Penguin Mimedefang Mandrakesoft Mandrake Linux Mandrakesoft Mandrake Linux Corporate Server Suse Linux	10/1/2005	16/6/2026	MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.
CVE-2002-1121	Modificada	Alta (7.5)	6.7%	—	GFI Mailsecurity Network Associates Webshield Smtp Roaring Penguin Canit Roaring Penguin Mimedefang+1	24/9/2002	16/6/2026	SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly")…