Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2523▼ 417 respecto a la semana anterior

Críticas / altas1297▲ 13 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)60▼ 468 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-45046	Analizada	Crítica (9)	100%	⚠ Explotación activa	Apache Log4j Cvat Computer Vision Annotation Tool Intel Audio Development KIT Intel Datacenter Manager+51	14/12/2021	17/6/2026	It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example,…
CVE-2021-44228	Analizada	Crítica (10)	100%	⚠ Explotación activa	Siemens 6bk1602-0aa12-0tp0 Firmware Siemens 6bk1602-0aa22-0tp0 Firmware Siemens 6bk1602-0aa32-0tp0 Firmware Siemens 6bk1602-0aa42-0tp0 Firmware+139	10/12/2021	11/8/2026	Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can…
CVE-2021-31891	Modificada	Crítica (10)	3.8%	—	Siemens Desigo CC Siemens Siveillance Control PRO Siemens Gma-manager Siemens Operation Scheduler+1	14/9/2021	17/6/2026	A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions with OIS running on Debian 9 or earlier), Operation Scheduler (All versions with OIS running on Debian 9 or earlier), Siveillance Control (All versions with OIS running on Debian 9 or earlier),…