Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior
Críticas / altas1458▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Baja (3.5) | 0.70% | — | IBM Proventia Network Mail Security System Virtual ApplianceIBM Proventia Network Mail Security System Virtual Appliance Firmware | 14/9/2010 | 16/6/2026 | CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the javaVersion parameter. | |
| Modificada | Media (4) | 1.3% | — | IBM Proventia Network Mail Security System Virtual ApplianceIBM Proventia Network Mail Security System Virtual Appliance Firmware | 14/9/2010 | 16/6/2026 | Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an "Insecure Direct Object… | |
| Modificada | Media (6.8) | 0.52% | — | IBM Proventia Network Mail Security System Virtual ApplianceIBM Proventia Network Mail Security System Virtual Appliance Firmware | 14/9/2010 | 16/6/2026 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change settings or (2) conduct… | |
| Modificada | Media (4.3) | 0.86% | — | IBM Proventia Network Mail Security System Virtual ApplianceIBM Proventia Network Mail Security System Virtual Appliance Firmware | 14/9/2010 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via (1) the date1 parameter to pvm_messagestore.php, (2) the… |