Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2715▼ 529 respecto a la semana anterior

Críticas / altas1290▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior

230 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-4017	Modificada	Media (4.3)	1.3%	—	Inter Network Marketing AG G3 Content Management System	7/8/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in the search module in Inter Network Marketing (INM) CMS G3 allows remote attackers to inject arbitrary web script or HTML via the search_string parameter.
CVE-2006-0920	Modificada	Baja (1.7)	0.79%	💥 Exploit	OI Email Marketing System	28/2/2006	16/6/2026	Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password.
CVE-2006-0919	Modificada	Alta (7.5)	1.3%	—	OI Email Marketing System	28/2/2006	16/6/2026	SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing System 3.0 (aka Oi! 3) allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.
CVE-2005-1733	Modificada	Media (5)	1.5%	—	Metro Marketing Cookie Cart	24/5/2005	16/6/2026	Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt.
CVE-2005-1732	Modificada	Media (5)	1.5%	—	Metro Marketing Cookie Cart	24/5/2005	16/6/2026	Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi.