Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2015-1599	Modificada	Baja (2.1)	0.40%	—	Siemens Spcanywhere	7/3/2015	17/6/2026	The Siemens SPCanywhere application for iOS allows physically proximate attackers to bypass intended access restrictions by leveraging a filesystem architectural error.
CVE-2015-1598	Modificada	Baja (2.1)	0.39%	—	Siemens Spcanywhere	7/3/2015	17/6/2026	The Siemens SPCanywhere application for Android does not properly store application passwords, which allows physically proximate attackers to obtain sensitive information by examining the device filesystem.
CVE-2015-1597	Modificada	Media (6.8)	1.1%	—	Siemens Spcanywhere	7/3/2015	17/6/2026	The Siemens SPCanywhere application for Android does not use encryption during the loading of code, which allows man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream.
CVE-2015-1596	Modificada	Media (5.8)	0.67%	—	Siemens Spcanywhere	7/3/2015	17/6/2026	The Siemens SPCanywhere application for Android and iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2015-1595	Modificada	Media (4.3)	0.67%	—	Siemens Spcanywhere	7/3/2015	17/6/2026	The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings, which allows man-in-the-middle attackers to discover alarm IP addresses and spoof servers by intercepting the client-server data stream.