Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3027▼ 69 respecto a la semana anterior

Críticas / altas1424▲ 58 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-3924	Modificada	Alta (9.3)	4.0%	—	Raven Software Soldier OF Fortune 2 Punkbuster	10/11/2009	16/6/2026	Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet.
CVE-2006-3400	Modificada	Alta (7.5)	4.8%	—	ID Software Quake 3 Engine Raven Software Soldier OF Fortune 2	6/7/2006	16/6/2026	Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server.
CVE-2005-2115	Modificada	Media (5)	1.6%	—	Raven Software Soldier OF Fortune 2	5/7/2005	16/6/2026	Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation.
CVE-2005-0568	Modificada	Media (5)	3.1%	—	Raven Software Soldier OF Fortune 2	2/5/2005	16/6/2026	Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference.
CVE-2005-0983	Modificada	Media (5)	2.6%	—	Activision Call OF Duty Activision Call OF Duty United Offensive Activision Return TO Castle Wolfenstein ID Software Quake 3 Arena+6	2/5/2005	16/6/2026	Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.