Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2619▼ 461 respecto a la semana anterior

Críticas / altas1277▼ 72 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)235▼ 274 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2007-4773	Modificada	Crítica (9.8)	1.7%	—	Systrace Project Systrace	15/1/2020	16/6/2026	Systrace before 1.6.0 has insufficient escape policy enforcement.
CVE-2009-0343	Modificada	Alta (7.2)	0.82%	—	Niels Provos Systrace	29/1/2009	16/6/2026	Niels Provos Systrace 1.6f and earlier on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 32-bit syscall with a syscall number that corresponds to a policy-compliant 64-bit syscall, related to race conditions that occur in monitoring 64-bit processes.
CVE-2009-0342	Modificada	Alta (7.2)	0.45%	—	Provos Systrace	29/1/2009	16/6/2026	Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit syscall with a syscall number that corresponds to a policy-compliant 32-bit syscall.
CVE-2007-4305	Modificada	Media (6.2)	0.86%	—	Sysjail Systrace Todd Miller Sudo	13/8/2007	16/6/2026	Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
CVE-2004-2012	Modificada	Alta (7.2)	0.85%	—	Niels Provos Systrace Vladimir Kotal Systrace Port FOR Freebsd Netbsd	31/12/2004	16/6/2026	The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.