Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2760▲ 27 respecto a la semana anterior
Críticas / altas1467▲ 305 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)68▼ 441 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.6) | 8.4% | — | GNU Enscript | 23/10/2008 | 16/6/2026 | Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command. | |
| Modificada | Alta (7.5) | 4.4% | — | GNU Enscript | 21/1/2005 | 16/6/2026 | Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames. | |
| Modificada | Media (4.6) | 1.2% | — | GNU EnscriptSGI PropackRedhat Fedora CoreSuse Linux | 21/1/2005 | 16/6/2026 | The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters. | |
| Modificada | Media (5) | 4.0% | — | GNU Enscript | 31/12/2004 | 16/6/2026 | Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash). | |
| Modificada | Baja (3.6) | 0.35% | — | GNU EnscriptDebian LinuxRedhat Linux | 31/1/2002 | 16/6/2026 | GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files. |