Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3316▲ 443 respecto a la semana anterior
Críticas / altas1523▲ 46 respecto a la semana anterior
Nueva explotación activa (KEV)5→ sin cambios respecto a la semana anterior
Sin puntuar (sin CVSS)177▲ 6 respecto a la semana anterior
2807 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5) | 6.5% | 💥 Exploit | Active WEB Suite Technologies Active Classifieds | 28/6/2001 | 16/6/2026 | admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter. | |
| Modificada | Media (5) | 3.0% | 💥 Exploit | Itafrica Webactive | 3/5/2001 | 16/6/2026 | Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. | |
| Modificada | Media (5) | 3.7% | 💥 Exploit | Bytes Interactive WEB Shopper | 19/12/2000 | 23/9/2026 | Vulnerabilidad de salto de directorio en el programa de carrito de compras Bytes Interactive Web Shopper (shopper.cgi) 2.0 y anteriores permite a atacantes remotos leer archivos arbitrarios mediante un ataque .. (punto punto) en el parámetro newpage. | |
| Modificada | Media (5) | 2.6% | — | Itafrica Webactive | 12/7/2000 | 16/6/2026 | The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page. | |
| Modificada | Media (5) | 2.9% | — | Itafrica Webactive | 12/7/2000 | 16/6/2026 | Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL. | |
| Modificada | Media (5) | 1.3% | — | ICQ Activelist Server | 17/10/1999 | 16/6/2026 | ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port. | |
| Modificada | Media (4.6) | 0.32% | — | Triactive Remote Management | 19/2/1999 | 16/6/2026 | Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges. |