Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior
Críticas / altas1356▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (9.3) | 4.0% | — | Realnetworks Realone Desktop ManagerRealnetworks Realone Enterprise DesktopRealnetworks Realone Player | 23/11/2004 | 16/6/2026 | Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file. | |
| Modificada | Alta (7.6) | 7.2% | — | Realnetworks Realone Desktop ManagerRealnetworks Realone Enterprise DesktopRealnetworks Realone PlayerRealnetworks Realplayer | 23/11/2004 | 16/6/2026 | Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files. | |
| Modificada | Media (5.1) | 6.8% | — | Realnetworks Realone Desktop ManagerRealnetworks Realone Enterprise DesktopRealnetworks Realone Player | 20/10/2003 | 16/6/2026 | RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag. |