Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3308▲ 670 respecto a la semana anterior

Críticas / altas1549▲ 148 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 1 respecto a la semana anterior

Sin puntuar (sin CVSS)253▲ 241 respecto a la semana anterior

2660 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-1851	Modificada	Media (5)	1.4%	—	Skymarx Solutions Xflow	19/4/2006	16/6/2026	xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the (1) action parameter to members_only/index.cgi and (2) page parameter customer_area/index.cgi, probably due to invalid values.
CVE-2006-0552	Modificada	Alta (7.5)	4.8%	—	Oracle 10G Enterprise Manager Grid Control Oracle Application Server Oracle Collaboration Suite Oracle Database Server+8	4/2/2006	16/6/2026	Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.
CVE-2005-3522	Modificada	Media (4.3)	1.9%	💥 Exploit	Adventnet Manageengine Netflow Analyzer	6/11/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter.
CVE-2005-3456	Modificada	Alta (10)	2.1%	—	Oracle E-business Suite^AI Oracle E-business Applications^AI Oracle Application Object Library^AI Oracle Workflow Cartridge^AI	2/11/2005	16/6/2026	Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.9 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) APPS04 in Application Object Library, and (2) APPS17, (3) APPS18, and (4) APPS21 in Workflow Cartridge.
CVE-2004-1209	Modificada	Media (5)	1.0%	—	Verisign Payflow Link	10/1/2005	16/6/2026	Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase.
CVE-2004-1631	Modificada	Media (5)	1.4%	—	Openwfe Work Flow Engine	25/10/2004	16/6/2026	Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results.
CVE-2004-1630	Modificada	Media (4.3)	1.3%	—	Openwfe Work Flow Engine	25/10/2004	16/6/2026	Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to execute arbitrary web script or HTML via the url parameter.
CVE-2003-0671	Modificada	Alta (7.2)	0.55%	—	Jeremy Elson Tcpflow	27/8/2003	16/6/2026	Vulnerabilidad de cadena de formato en tcpflow, cuando se usa en un contexto setuid, permite a usuarios locales ejecutar código arbitrario mediante el argumento de nombre de dispositivo, como se ha demostrado con Sustworks IPNetSentryX e IPNetMonitorX usando el progarma ayudante RunTCPFlow.
CVE-2002-0107	Modificada	Media (5)	7.9%	💥 Exploit	Cacheflow Cacheos	25/3/2002	16/6/2026	El interfaz web de adminsitración en CacheFlow CacheOS 4.0.13 y anteriores permite a atacantes remotos obtener información sensible mediante una serie de peticiones GET que no terminan con con 'HTTP/1.0' u otra cadena de versión, lo que produce fugas de información en el mensaje de error.
CVE-1999-1524	Modificada	Media (5)	1.3%	—	Flowpoint DSL Router	7/8/1999	16/6/2026	FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port.