Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2640▼ 268 respecto a la semana anterior

Críticas / altas1348▲ 90 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)58▼ 468 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-2536	Modificada	Media (4.3)	16%	—	Microsoft System Center Configuration Manager Microsoft Systems Management Server	11/9/2012	16/6/2026	Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."
CVE-2004-0728	Modificada	Media (5)	25%	—	Microsoft Systems Management Server	27/7/2004	16/6/2026	The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address.
CVE-2000-0885	Modificada	Alta (7.5)	13%	—	Microsoft Systems Management Server Microsoft Windows 2000 Microsoft Windows NT	19/12/2000	23/9/2026	Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is highly likely that this…
CVE-2000-0100	Modificada	Alta (7.2)	2.8%	—	Microsoft Systems Management Server	29/12/1999	16/6/2026	The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.