Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2738▲ 10 respecto a la semana anterior

Críticas / altas1458▲ 322 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2015-8960	Modificada	Alta (8.1)	1.9%	—	Ietf Transport Layer Security Netapp Clustered Data Ontap Antivirus Connector Netapp Data Ontap Edge Netapp Host Agent+9	21/9/2016	17/6/2026	The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which…
CVE-2010-4103	Modificada	Media (5)	2.5%	—	HP Insight Managed System Setup Wizard	2/11/2010	16/6/2026	Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown vectors.
CVE-2004-2600	Modificada	Media (5)	2.6%	—	Intel CLI Auto-configuration Utility Intel Client System Setup Utility Intel Server Configuration Wizard Intel Server Control+18	31/12/2004	16/6/2026	The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.