Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior
Críticas / altas1458▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 1.8% | — | Redhat SatelliteRedhat Satellite With Embedded OracleRedhat Spacewalk-javaSuse Manager Server+1 | 3/11/2014 | 17/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3)… | |
| Modificada | Media (4.3) | 1.8% | — | Redhat SatelliteRedhat Satellite With Embedded OracleRedhat Spacewalk-javaSuse Manager+1 | 22/9/2014 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging. | |
| Modificada | Alta (7.5) | 2.1% | — | Redhat Network SatelliteRedhat SatelliteRedhat Satellite With Embedded OracleSuse Manager+1 | 18/11/2013 | 16/6/2026 | Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts. | |
| Modificada | Baja (2.1) | 0.48% | — | Oracle JREOracle JDKRedhat Icedtea6Redhat Satellite With Embedded Oracle+13 | 16/6/2012 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux. | |
| Analizada | Crítica (9.8) | 97% | ⚠ Explotación activa💥 Exploit | Oracle JDKOracle JRECanonical Ubuntu LinuxRedhat Satellite With Embedded Oracle+2 | 19/10/2011 | 16/6/2026 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting. |