Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior

Críticas / altas1273▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior

232 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2004-1551	Modificada	Media (4.3)	2.6%	💥 Exploit	PHP Arena Pafiledb	31/12/2004	16/6/2026	Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter.
CVE-2004-0289	Modificada	Baja (2.1)	0.37%	—	Paul L Daniels Signaturedb	23/11/2004	16/6/2026	Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) via a database file that contains a large key parameter.
CVE-2004-1975	Modificada	Media (4.3)	1.7%	💥 Exploit	PHP Arena Pafiledb	27/4/2004	16/6/2026	Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551.
CVE-2004-1974	Modificada	Media (5)	1.2%	—	PHP Arena Pafiledb	27/4/2004	16/6/2026	paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message.
CVE-2002-1931	Modificada	Media (4.3)	1.2%	—	PHP Arena Pafiledb	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string.
CVE-2002-1929	Modificada	Media (4.3)	1.9%	💥 Exploit	PHP Arena Pafiledb	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the (1) rate, (2) email, or (3) download actions.
CVE-1999-1176	Modificada	Alta (7.2)	0.39%	—	Aaron Ledbetter Cidentd Jidentd	10/1/1998	16/6/2026	Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script.