Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 224 respecto a la semana anterior

Críticas / altas1384▲ 157 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2007-4654	Modificada	Media (5)	2.0%	—	Cisco Webns Openbsd Openssh Teamf1 Sshield	4/9/2007	16/6/2026	Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch (CSS) series 11000 devices allows remote attackers to cause a denial of service (connection slot exhaustion and device crash) via a series of large packets designed to exploit the SSH CRC32 attack…
CVE-2005-0356	Modificada	Media (5)	83%	—	Cisco Agent Desktop Cisco E-mail Manager Cisco Emergency Responder Cisco Intelligent Contact Manager+72	31/5/2005	16/6/2026	Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
CVE-2004-0079	Modificada	Alta (7.5)	9.5%	—	Cisco Firewall Services Module HP AAA Server HP Apache-based WEB Server Symantec Clientless VPN Gateway 4400+62	23/11/2004	16/6/2026	The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVE-2004-0081	Modificada	Media (5)	7.2%	—	Cisco Firewall Services Module HP AAA Server HP Apache-based WEB Server Symantec Clientless VPN Gateway 4400+62	23/11/2004	16/6/2026	OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVE-2004-0112	Modificada	Media (5)	10%	—	Cisco Firewall Services Module HP AAA Server HP Apache-based WEB Server Symantec Clientless VPN Gateway 4400+61	23/11/2004	16/6/2026	The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
CVE-2003-0677	Modificada	Media (5)	1.6%	—	Cisco Webns	27/8/2003	16/6/2026	Cisco CSS 11000 routers on the CS800 chassis allow remote attackers to cause a denial of service (CPU consumption or reboot) via a large number of TCP SYN packets to the circuit IP address, aka "ONDM Ping failure."
CVE-2002-0870	Modificada	Alta (7.5)	1.5%	—	Cisco Webns Cisco Content Services Switch 11000	5/9/2002	16/6/2026	The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface, possibly via a variant of…
CVE-2002-0792	Modificada	Media (5)	2.5%	—	Cisco Webns Cisco Content Services Switch 11000	12/8/2002	16/6/2026	The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data.