Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2002-1374	Modificada	Alta (7.5)	20%	—	Oracle Mysql Symantec Veritas Netbackup Advanced Reporter Symantec Veritas Netbackup Global Data Manager	23/12/2002	16/6/2026	The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.
CVE-2002-1375	Modificada	Alta (7.5)	24%	—	Oracle Mysql Symantec Veritas Netbackup Advanced Reporter Symantec Veritas Netbackup Global Data Manager	23/12/2002	16/6/2026	The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.
CVE-2002-1376	Modificada	Alta (7.5)	6.8%	—	Oracle Mysql Symantec Veritas Netbackup Advanced Reporter Symantec Veritas Netbackup Global Data Manager	23/12/2002	16/6/2026	libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.