Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2632▼ 455 respecto a la semana anterior

Críticas / altas1285▼ 65 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)235▼ 275 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-2688	Modificada	Alta (10)	8.6%	—	Xemacs	5/8/2009	16/6/2026	Multiple integer overflows in glyphs-eimage.c in XEmacs 21.4.22, when running on Windows, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) the tiff_instantiate function processing a crafted TIFF file, (2) the png_instantiate function processing a crafted PNG file, and (3)…
CVE-2008-2142	Modificada	Media (6.8)	3.7%	—	GNU Emacs GNU Xemacs	12/5/2008	16/6/2026	Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
CVE-2005-0100	Modificada	Alta (7.5)	4.3%	—	GNU Emacs GNU Xemacs	7/2/2005	16/6/2026	Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.
CVE-2003-0539	Modificada	Media (4.6)	0.36%	—	Ddskk Redhat Daredevil SKK Redhat Ddskk-xemacs SKK	18/8/2003	16/6/2026	skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.
CVE-2001-1301	Modificada	Baja (1.2)	0.29%	—	GNU Emacs Xemacs	7/8/2001	16/6/2026	rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file.