Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▲ 13 respecto a la semana anterior

Críticas / altas1459▲ 323 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-7995	Modificada	Alta (7.8)	0.20%	—	Autodesk Vred	5/11/2024	17/6/2026	A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution.
CVE-2023-25002	Modificada	Alta (7.8)	0.35%	—	Autodesk 3DS MAX Autodesk Navisworks Autodesk Revit Autodesk Vred	27/6/2023	17/6/2026	A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
CVE-2023-29068	Modificada	Alta (7.8)	0.24%	—	Autodesk Alias Autodesk Autocad Autodesk Autocad Advance Steel Autodesk Autocad Architecture+13	27/6/2023	17/6/2026	A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVE-2023-25004	Modificada	Alta (7.8)	0.24%	—	Autodesk Alias Autodesk Autocad Autodesk Autocad Advance Steel Autodesk Autocad Architecture+13	27/6/2023	17/6/2026	A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.
CVE-2023-25003	Modificada	Alta (7.8)	0.25%	—	Autodesk Alias Autodesk Autocad Autodesk Autocad Advance Steel Autodesk Autocad Architecture+13	23/6/2023	17/6/2026	A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution.
CVE-2014-2967	Modificada	Alta (10)	5.1%	—	Autodesk Vred	7/7/2014	17/6/2026	Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server.
CVE-2003-1384	Modificada	Media (4.3)	1.3%	—	PY Software Py-livredor	31/12/2003	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the (1) titre, (2) Votre pseudo, (3) Votre e-mail, or (4) Votre message fields.