Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior
Críticas / altas1284▼ 85 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
–

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (4.6)0.40%—Savant Webserver8/9/200516/6/2026
Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges.
ModificadaAlta (7.5)5.4%—Savant Webserver2/5/200516/6/2026
Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
ModificadaMedia (5)6.9%—Savant Webserver31/12/200216/6/2026
Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length value.
ModificadaAlta (7.5)2.6%—Savant Webserver31/12/200216/6/2026
cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request.
ModificadaAlta (7.5)7.7%—Savant Webserver31/12/200216/6/2026
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
ModificadaMedia (5)1.8%—Michael Lamont Savant Webserver25/3/200216/6/2026
Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters.
ModificadaAlta (7.5)1.8%—Micheal Lamont Savant Webserver18/6/200116/6/2026
Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.
ModificadaAlta (7.5)3.7%—Michael Lamont Savant Webserver8/7/200016/6/2026
Savant web server allows remote attackers to execute arbitrary commands via a long GET request.
ModificadaMedia (5)7.7%—Michael Lamont Savant Webserver5/6/200016/6/2026
Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number.
ModificadaMedia (5)2.3%—Michael Lamont Savant Webserver28/12/199916/6/2026
Denial of service in Savant web server via a null character in the requested URL.