Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2686▼ 84 respecto a la semana anterior

Críticas / altas1444▲ 301 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-21245	Modificada	Crítica (9.1)	1.1%	—	Apsis Pound	15/6/2020	17/6/2026	Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.
CVE-2019-20809	Modificada	Alta (7.5)	0.88%	—	Compound Price Oracle	3/6/2020	17/6/2026	The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings.
CVE-2016-10711	Modificada	Crítica (9.8)	2.8%	—	Debian Linux Apsis Pound	29/1/2018	17/6/2026	Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.
CVE-2005-3751	Modificada	Media (4.3)	1.5%	—	Apsis Pound	22/11/2005	16/6/2026	HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.
CVE-2005-1391	Modificada	Alta (7.5)	6.1%	—	Apsis Pound	3/5/2005	16/6/2026	Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.
CVE-2004-2026	Modificada	Alta (7.5)	6.6%	—	Apsis Pound	31/12/2004	16/6/2026	Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.