Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior

Críticas / altas1294▼ 196 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

233 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-5240	Modificada	Media (5.1)	4.1%	💥 Exploit	Docmint CMS	12/10/2006	16/6/2026	PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the MY_ENV[BASE_ENGINE_LOC] parameter.
CVE-2006-2180	Modificada	Media (6.4)	6.8%	💥 Exploit	Kmint21 Software Golden FTP Server	4/5/2006	16/6/2026	Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long argument to the (1) NLST or (2) APPE commands, as demonstrated by the Infigo FTPStress Fuzzer.
CVE-2005-4553	Modificada	Alta (7.5)	9.7%	💥 Exploit	Kmint21 Software Golden FTP Server	28/12/2005	16/6/2026	Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long APPE command. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2005-2142	Modificada	Baja (2.1)	0.72%	—	Kmint21 Software Golden FTP Server	5/7/2005	16/6/2026	Directory traversal vulnerability in Golden FTP Server 2.60 allows remote authenticated attackers to list arbitrary directories via a "\.." (backslash dot dot) in an LS (LIST) command.
CVE-2005-1484	Modificada	Media (5)	1.7%	—	Kmint21 Software Golden FTP Server	11/5/2005	16/6/2026	Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a "\.." (backward slash dot dot) with a leading '"' (double quote) in the GET command.
CVE-2005-1485	Modificada	Media (5)	1.4%	—	Kmint21 Software Golden FTP Server	11/5/2005	16/6/2026	Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message.
CVE-2005-0634	Modificada	Alta (7.5)	10%	💥 Exploit	Kmint21 Software Golden FTP Server	2/5/2005	16/6/2026	Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
CVE-2005-0566	Modificada	Alta (7.5)	16%	💥 Exploit	Kmint21 Software Golden FTP Server	22/1/2005	16/6/2026	Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command.