Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2855▼ 166 respecto a la semana anterior
Críticas / altas1379▲ 45 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (4.4) | 0.13% | — | Dell Vxrail D560 FirmwareDell Vxrail D560f FirmwareDell Vxrail E460 FirmwareDell Vxrail E560 Firmware+38 | 8/1/2025 | 17/6/2026 | Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. | |
| Analizada | Media (4.4) | 0.17% | — | Dell Vxrail D560 FirmwareDell Vxrail D560f FirmwareDell Vxrail E460 FirmwareDell Vxrail E560 Firmware+38 | 8/1/2025 | 17/6/2026 | Dell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. | |
| Modificada | Baja (3.3) | 0.25% | — | Dell Vxrail D560 FirmwareDell Vxrail D560f FirmwareDell Vxrail E460 FirmwareDell Vxrail E560 Firmware+41 | 23/6/2023 | 17/6/2026 | Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s… | |
| Modificada | Alta (7.5) | 0.46% | — | Dell Vxrail D560 FirmwareDell Vxrail D560f FirmwareDell Vxrail E460 FirmwareDell Vxrail E560 Firmware+41 | 23/6/2023 | 17/6/2026 | Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction. |