Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2015-3406	Modificada	Alta (7.5)	2.3%	—	Module-signature Project Module-signature Canonical Ubuntu Linux	29/11/2019	17/6/2026	The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors.
CVE-2015-3409	Modificada	Alta (7.2)	0.41%	—	Module-signature Project Module-signature Canonical Ubuntu Linux	19/5/2015	17/6/2026	Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.
CVE-2015-3408	Modificada	Alta (10)	5.6%	—	Module-signature Project Module-signature Canonical Ubuntu Linux	19/5/2015	17/6/2026	Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
CVE-2015-3407	Modificada	Media (5)	2.3%	—	Canonical Ubuntu Linux Module-signature Project Module-signature	19/5/2015	17/6/2026	Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files.