Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2632▼ 455 respecto a la semana anterior
Críticas / altas1285▼ 65 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)235▼ 275 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5) | 1.2% | — | Cisco Unified Videoconferencing System 5110 FirmwareCisco Unified Videoconferencing System 5115 FirmwareCisco Unified Videoconferencing System 5110Cisco Unified Videoconferencing System 5115+10 | 22/11/2010 | 16/6/2026 | Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) improperly use cookies for web-interface… | |
| Modificada | Media (6.4) | 1.2% | — | Cisco Unified Videoconferencing System 5110 FirmwareCisco Unified Videoconferencing System 5115 FirmwareCisco Unified Videoconferencing System 5110Cisco Unified Videoconferencing System 5115+10 | 22/11/2010 | 16/6/2026 | The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) uses predictable… | |
| Modificada | Media (4.9) | 0.35% | — | Cisco Unified Videoconferencing System 5110 FirmwareCisco Unified Videoconferencing System 5115 FirmwareCisco Unified Videoconferencing System 5110Cisco Unified Videoconferencing System 5115 | 22/11/2010 | 16/6/2026 | Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043. | |
| Modificada | Media (4.9) | 0.35% | — | Cisco Unified Videoconferencing System 5110 FirmwareCisco Unified Videoconferencing System 5115 FirmwareCisco Unified Videoconferencing System 5110Cisco Unified Videoconferencing System 5115 | 22/11/2010 | 16/6/2026 | /opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses a weak hashing algorithm for the (1) administrator and (2) operator passwords, which makes it easier for local users to obtain sensitive information by… | |
| Modificada | Alta (10) | 3.3% | — | Cisco Unified Videoconferencing System 5110 FirmwareCisco Unified Videoconferencing System 5115 FirmwareCisco Unified Videoconferencing System 5110Cisco Unified Videoconferencing System 5115 | 22/11/2010 | 16/6/2026 | Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, has a default password for the (1) root, (2) cs, and (3) develop accounts, which makes it easier for remote attackers to obtain access via the (a) FTP or (b) SSH daemon, aka Bug ID CSCti54008. | |
| Modificada | Alta (8.5) | 2.9% | — | Cisco Unified Videoconferencing System 5110 FirmwareCisco Unified Videoconferencing System 5115 FirmwareCisco Unified Videoconferencing System 5110Cisco Unified Videoconferencing System 5115+10 | 22/11/2010 | 16/6/2026 | goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, and possibly Unified Videoconferencing System 3545 and 5230, Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway, Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway, and Unified… | |
| Modificada | Baja (3.5) | 1.2% | — | Cisco ACS Solution EngineCiscoworksCisco IP CommunicatorCisco Meetingplace+14 | 16/3/2007 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified… |