Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2616▼ 309 respecto a la semana anterior

Críticas / altas1342▲ 71 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 465 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2007-1367	Modificada	Media (4.3)	1.1%	—	Avaya S8710 Avaya S8300 Avaya S8500 Avaya S8700	9/3/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Login field.
CVE-2004-1235	Modificada	Media (6.2)	2.9%	—	Avaya Mn100 Avaya Network Routing Avaya Converged Communications Server Avaya S8710+16	14/4/2005	16/6/2026	Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
CVE-2005-0003	Modificada	Baja (2.1)	0.51%	—	Avaya Mn100 Avaya Network Routing Avaya Converged Communications Server Avaya S8710+11	14/4/2005	16/6/2026	The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.