Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2556▼ 314 respecto a la semana anterior

Críticas / altas1340▲ 78 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-67433	Aplazada	Alta (7.5)	0.41%	—	Open Tftp Server Multithreaded^AI	12/2/2026	17/6/2026	A heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7 allows attackers to cause a Denial of Service (DoS) via a crafted DATA packet.
CVE-2020-26130	Modificada	Alta (7.8)	0.44%	—	Open Tftp Server Project Open Tftp Server	28/10/2020	17/6/2026	Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary.
CVE-2019-12568	Modificada	Crítica (9.8)	2.3%	—	Open Tftp Server Project Open Tftp Server	23/12/2019	17/6/2026	Stack-based overflow vulnerability in the logMess function in Open TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via a long TFTP error packet, a different vulnerability than CVE-2018-10387 and CVE-2019-12567.
CVE-2019-12567	Modificada	Crítica (9.8)	2.3%	—	Open Tftp Server Project Open Tftp Server	23/12/2019	17/6/2026	Stack-based overflow vulnerability in the logMess function in Open TFTP Server MT 1.65 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via a long TFTP error packet, a different vulnerability than CVE-2018-10387 and CVE-2019-12568.
CVE-2018-10389	Modificada	Crítica (9.8)	2.3%	—	Open Tftp Server Project Open Tftp Server	23/12/2019	17/6/2026	Format string vulnerability in the logMess function in TFTP Server MT 1.65 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet.
CVE-2018-10388	Modificada	Crítica (9.8)	4.4%	—	Open Tftp Server Project Open Tftp Server	23/12/2019	17/6/2026	Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet.
CVE-2018-10387	Modificada	Crítica (9.8)	2.9%	—	Open Tftp Server Project Open Tftp Server	23/12/2019	17/6/2026	Heap-based overflow vulnerability in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or possibly execute arbitrary code via a long TFTP error packet, a different vulnerability than CVE-2008-2161.