Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior

Críticas / altas1313▼ 190 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior

13 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-2737	Modificada	Media (5.5)	0.14%	—	Thalesgroup Safenet Authentication Service	16/8/2023	17/6/2026	Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation.
CVE-2021-42810	Modificada	Alta (7.8)	0.32%	—	Thalesgroup Safenet Authentication Service Remote Desktop Gateway	19/1/2022	17/6/2026	A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed.
CVE-2015-7967	Modificada	Alta (7.8)	0.39%	—	Gemalto Safenet Authentication Service FOR Citrix WEB Interface Agent	2/3/2018	17/6/2026	SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVE-2015-7966	Modificada	Alta (7.8)	0.39%	—	Gemalto Safenet Authentication Service Windows Logon Agent	2/3/2018	17/6/2026	SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module, a different vulnerability than CVE-2015-7965.
CVE-2015-7965	Modificada	Alta (7.8)	0.39%	—	Gemalto Safenet Authentication Service Windows Logon Agent	2/3/2018	17/6/2026	SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module, a different vulnerability than CVE-2015-7966.
CVE-2015-7964	Modificada	Alta (7.8)	0.39%	—	Gemalto Safenet Authentication Service FOR NPS Agent	2/3/2018	17/6/2026	SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVE-2015-7963	Modificada	Alta (7.8)	0.39%	—	Gemalto Safenet Authentication Service FOR AD FS Agent	2/3/2018	17/6/2026	SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVE-2015-7962	Modificada	Alta (7.8)	0.41%	—	Gemalto Safenet Authentication Service FOR Outlook WEB APP Agent	2/3/2018	17/6/2026	SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVE-2015-7961	Modificada	Alta (7.8)	0.39%	—	Gemalto Safenet Authentication Service Remote WEB Workplace Agent	2/3/2018	17/6/2026	SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVE-2015-7598	Modificada	Alta (7.8)	0.39%	—	Gemalto Safenet Authentication Service Tokenvalidator Proxy Agent	2/3/2018	17/6/2026	SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVE-2015-7597	Modificada	Alta (7.8)	0.39%	—	Gemalto Safenet Authentication Service IIS Agent	2/3/2018	17/6/2026	SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVE-2015-7596	Modificada	Alta (7.8)	0.38%	—	Gemalto Safenet Authentication Service END User Software Tools FOR Windows	2/3/2018	17/6/2026	SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVE-2014-5359	Modificada	Alta (7.8)	3.8%	—	Safenet-inc Safenet Authentication Service Outlook WEB Access Agent	16/12/2014	17/6/2026	Directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access Agent (formerly CRYPTOCard) before 1.03.30109 allows remote attackers to read arbitrary files via a .. (dot dot) in the GetFile parameter to owa/owa.