Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2632▼ 455 respecto a la semana anterior

Críticas / altas1285▼ 65 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)235▼ 275 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-2606	Modificada	Media (5)	2.1%	—	Bradfordnetworks Network Sentry Appliance Software Bradfordnetworks Network Sentry Appliance	13/6/2012	16/6/2026	The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack.
CVE-2012-2605	Modificada	Media (6.8)	0.76%	—	Bradfordnetworks Network Sentry Appliance Software Bradfordnetworks Network Sentry Appliance	13/6/2012	16/6/2026	Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that (1) insert XSS sequences or (2) send messages to clients.
CVE-2012-2604	Modificada	Baja (3.5)	1.1%	—	Bradfordnetworks Network Sentry Appliance Software Bradfordnetworks Network Sentry Appliance	13/6/2012	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields.