Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2687▼ 562 respecto a la semana anterior

Críticas / altas1259▼ 239 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 239 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-3899	Modificada	Alta (7.8)	0.24%	—	Redhat Subscription-manager Fedoraproject Fedora Redhat Enterprise Linux Redhat Enterprise Linux Desktop+16	23/8/2023	17/6/2026	A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a…
CVE-2021-41415	Modificada	Media (6.1)	0.61%	—	Subscription-manager Project Subscription-manager	15/6/2022	17/6/2026	Subscription-Manager v1.0 /main.js has a cross-site scripting (XSS) vulnerability in the machineDetail parameter.
CVE-2017-2663	Modificada	Alta (7.8)	0.36%	—	Redhat Subscription-manager	27/7/2018	17/6/2026	It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and com.redhat.RHSM1.Config.Set methods. An unprivileged local attacker could use these methods to gain access to private information, or launch a privilege escalation attack.
CVE-2016-4455	Modificada	Baja (3.3)	0.43%	—	Redhat Enterprise Linux Desktop Redhat Enterprise Linux HPC Node Redhat Enterprise Linux Server Redhat Enterprise Linux Workstation+1	14/4/2017	17/6/2026	The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.
CVE-2011-5136	Modificada	Media (6.4)	1.6%	—	Epractizelabs Subscription Manager	30/8/2012	16/6/2026	showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter.
CVE-2007-0402	Modificada	Media (6.8)	1.2%	—	Easebay Resources Paypal Subscription Manager	22/1/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in admin/edit_member.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter.
CVE-2007-0403	Modificada	Alta (7.5)	1.2%	—	Easebay Resources Paypal Subscription Manager	22/1/2007	16/6/2026	SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter.