Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior
Críticas / altas1403▲ 41 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 0.82% | — | Southrivertech Titan MFT ServerSouthrivertech Titan Sftp Server | 16/10/2023 | 17/6/2026 | Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via path traversal | |
| Modificada | Media (4.3) | 0.63% | — | Southrivertech Titan MFT ServerSouthrivertech Titan Sftp Server | 16/10/2023 | 17/6/2026 | Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in the ftp "SIZE" command | |
| Modificada | Alta (8.8) | 1.2% | — | Southrivertech Titan MFT ServerSouthrivertech Titan Sftp Server | 16/10/2023 | 17/6/2026 | A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's authentication if they can trick an administrator into authorizating a session id of their choosing | |
| Modificada | Crítica (9.1) | 1.4% | — | Southrivertech Titan MFT ServerSouthrivertech Titan Sftp Server | 16/10/2023 | 17/6/2026 | Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal |