Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior

Críticas / altas1294▼ 234 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior

337 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2003-1469	Modificada	Media (5)	6.2%	💥 Exploit	Macromedia Coldfusion Macromedia Coldfusion Professional	31/12/2003	16/6/2026	The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.
CVE-2002-1992	Modificada	Media (5)	1.8%	—	Macromedia Coldfusion Macromedia Coldfusion Professional	31/12/2002	16/6/2026	Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.
CVE-2002-1994	Modificada	Media (5)	1.6%	—	Gamecheats Advanced WEB Server Professional	31/12/2002	16/6/2026	advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of service via multiple HTTP requests containing a single carriage return/line feed (CRLF) sequence.
CVE-2002-1753	Modificada	Alta (7.5)	32%	—	Cgiscript Csnews Professional	31/12/2002	16/6/2026	csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVE-2002-0495	Modificada	Alta (10)	13%	💥 Exploit	Cgiscript Cssearch Professional	12/8/2002	16/6/2026	csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi.
CVE-2001-0626	Modificada	Alta (7.5)	7.0%	💥 Exploit	Oreilly Website Professional	22/8/2001	16/6/2026	O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character.
CVE-2001-1139	Modificada	Media (5)	2.1%	—	Ascii NT Winwrapper Professional	22/8/2001	16/6/2026	Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request.
CVE-2000-0622	Modificada	Alta (10)	13%	💥 Exploit	Oreilly Website Professional	19/7/2000	16/6/2026	Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter.
CVE-2000-0623	Modificada	Alta (10)	5.3%	—	Oreilly Website Professional	17/7/2000	16/6/2026	Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header.
CVE-2000-0577	Modificada	Alta (10)	4.5%	💥 Exploit	Netscape Professional Services Ftpserver	21/6/2000	16/6/2026	Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0066	Modificada	Media (5)	2.0%	—	Oreilly Website Professional	13/1/2000	16/6/2026	WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request.
CVE-1999-0916	Modificada	Baja (2.1)	0.40%	—	Webtrends Enterprise Suite Webtrends FOR Firewalls Webtrends LOG Analyzer Webtrends Professional Suite+1	29/6/1999	16/6/2026	WebTrends software stores account names and passwords in a file which does not have restricted access permissions.