Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2737▼ 484 respecto a la semana anterior

Críticas / altas1302▼ 187 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

230 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-2154	Modificada	Media (6.8)	0.87%	💥 Exploit	Sappy.dk Impleo Music Collection	22/6/2009	16/6/2026	SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVE-2009-2153	Modificada	Media (4.3)	1.3%	💥 Exploit	Sappy.dk Impleo Music Collection	22/6/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.
CVE-2007-2282	Modificada	Alta (10)	4.7%	—	Cisco Netflow Collection Engine	26/4/2007	16/6/2026	Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.
CVE-2003-1345	Modificada	Media (5)	1.5%	—	Follett Software Webcollection Plus	31/12/2003	16/6/2026	Directory traversal vulnerability in s.dll in WebCollection Plus 5.00 allows remote attackers to view arbitrary files in c:\ via a full pathname in the d parameter.
CVE-2002-2222	Modificada	Media (5.1)	1.3%	—	Freebsd Ports Collection Openbsd	31/12/2002	16/6/2026	isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause a denial of service (crash) by sending Internet Key Exchange (IKE) payloads out of sequence.