Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2675▼ 351 respecto a la semana anterior

Críticas / altas1301▼ 12 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 272 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-24874	Analizada	Crítica (9.1)	0.29%	—	Themrdemonized Xray-monolith	27/1/2026	31/8/2026	Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in themrdemonized xray-monolith.This issue affects xray-monolith: before 2025.12.30.
CVE-2023-25041	Modificada	Media (6.1)	0.41%	—	Cththemes Monolit	7/4/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Monolit theme <= 2.0.6 versions.
CVE-2018-1212	Modificada	Alta (8.8)	4.3%	—	Dell Idrac6 Modular Dell Idrac6 Monolithic	2/7/2018	17/6/2026	The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contains a command injection vulnerability. A remote authenticated malicious iDRAC user with access to the diagnostics console could potentially exploit this vulnerability to execute arbitrary commands as…
CVE-2014-8272	Modificada	Media (5)	19%	—	Dell Idrac6 Modular Dell Idrac7 Intel Ipmi Dell Idrac6 Monolithic	19/12/2014	17/6/2026	The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.
CVE-2013-3589	Modificada	Media (4.3)	1.6%	—	Dell Idrac6 Firmware Dell Idrac6 Monolithic Dell Idrac7 Firmware Dell Idrac7	24/9/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.
CVE-2007-5247	Modificada	Alta (9.3)	5.2%	—	Monolith Productions First Encounter Assault Recon	6/10/2007	16/6/2026	Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet…
CVE-2004-1587	Modificada	Media (5)	5.2%	—	Monolith Productions Alien Versus Predator Monolith Productions Blood Monolith Productions NO ONE Lives Forever Monolith Productions Shogo	31/12/2004	16/6/2026	Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allows remote attackers to cause a denial of service (application crash) via a long secure Gamespy query.
CVE-2004-1500	Modificada	Baja (2.1)	1.9%	—	Freeform Interactive Purge Jihad Monolith Productions Alien Versus Predator Monolith Productions Blood Monolith Productions Contract Jack+7	31/12/2004	16/6/2026	Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.
CVE-2004-1395	Modificada	Media (5)	3.8%	—	Monolith Productions Contract Jack Monolith Productions NO ONE Lives Forever 2 Monolith Productions Tron	31/12/2004	16/6/2026	The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron 2.0 1.042 and earlier, (4) F.E.A.R. (First Encounter Assault and Recon), and possibly other games, allows remote attackers to cause a denial of service (connection refused) via a UDP packet that…