Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2649▼ 259 respecto a la semana anterior

Críticas / altas1356▲ 99 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)58▼ 469 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-20687	Modificada	Crítica (9.8)	2.5%	—	Raritan Commandcenter Secure Gateway	18/11/2019	17/6/2026	An XML external entity (XXE) vulnerability in CommandCenterWebServices/.*?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
CVE-2014-9095	Modificada	Alta (7.5)	2.3%	—	Raritan Power IQ	26/11/2014	17/6/2026	Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter to license/records.
CVE-2014-3901	Modificada	Alta (7.8)	2.3%	—	Raritan Dominion KX Ii-101 Firmware	12/8/2014	17/6/2026	Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial of service (device hang) via a crafted packet.
CVE-2014-2955	Modificada	Alta (10)	2.8%	—	Raritan PX Raritan Dpxr20a-16	14/7/2014	17/6/2026	Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.
CVE-2005-2136	Modificada	Media (4.6)	0.59%	—	Raritan Dominion SX4 Firmware Raritan Dominion SX8 Firmware Raritan Dominion Sx16 Firmware Raritan Dominion Sx32 Firmware+1	5/7/2005	16/6/2026	Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.