Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2663▼ 380 respecto a la semana anterior
Críticas / altas1289▼ 36 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior
11 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (9.3) | 33% | — | Motorola Timbuktu PRO | 26/6/2009 | 16/6/2026 | Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe. | |
| Modificada | Alta (10) | 69% | — | Netopia Timbuktu PRO | 14/3/2008 | 16/6/2026 | Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ (backslash) character followed by ../ (dot dot… | |
| Modificada | Alta (7.5) | 2.9% | — | Netopia Timbuktu PRO | 14/3/2008 | 16/6/2026 | Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified (1) computer name, (2) user… | |
| Modificada | Media (5) | 1.7% | — | Netopia Timbuktu PRO | 14/3/2008 | 16/6/2026 | The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (daemon crash) via an invalid Version field or (2) a denial of service (CPU consumption and daemon termination) via an invalid or partial message. | |
| Modificada | Alta (10) | 6.3% | — | Motorola Timbuktu | 29/8/2007 | 16/6/2026 | Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via (1) a long user name and (2) certain malformed requests; and (3) allow remote Timbuktu servers to have an unknown impact via a malformed… | |
| Modificada | Alta (7.8) | 4.0% | — | Motorola Timbuktu | 29/8/2007 | 16/6/2026 | Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete arbitrary files via a .. (dot dot) in a Send request, probably related to the (1) Send and (2) Exchange services. | |
| Modificada | Media (5) | 2.0% | — | Netopia Timbuktu PRO MAC | 23/12/2004 | 16/6/2026 | Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service (server process crash) via a certain data string that is sent to multiple simultaneous client connections to TCP port 407. | |
| Modificada | Media (5) | 3.2% | — | Netopia Timbuktu PRO | 25/3/2002 | 16/6/2026 | Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420). | |
| Modificada | Baja (2.1) | 0.30% | — | Netopia Timbuktu MAC | 2/7/2001 | 16/6/2026 | Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu. | |
| Modificada | Media (5) | 8.0% | — | Netopia Timbuktu PRO | 11/2/2000 | 16/6/2026 | The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417. | |
| Modificada | Media (5) | 1.4% | — | Netopia Timbuktu PRO | 18/1/2000 | 16/6/2026 | Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing. |