Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior

Críticas / altas1294▼ 234 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior

364 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2003-1517	Modificada	Media (5)	2.0%	💥 Exploit	Dansie Shopping Cart	31/12/2003	16/6/2026	cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, which leaks the path in an error message.
CVE-2002-1680	Modificada	Media (4.3)	1.2%	—	Cows CGI Online Worldweb Shopping	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in CGI Online Worldweb Shopping 1.1 (a.k.a. COWS) allows remote attackers to execute arbitrary script as other users by injecting script into (1) diagnose.cgi or (2) compatible.cgi.
CVE-2002-0553	Modificada	Alta (7.5)	2.9%	💥 Exploit	Turnkey Solutions Sunshop Shopping Cart	3/7/2002	16/6/2026	Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into fields during new customer registration.
CVE-2001-0985	Modificada	Alta (7.5)	3.9%	💥 Exploit	Hassan Consulting Shopping Cart	8/9/2001	16/6/2026	shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter.
CVE-2001-0466	Modificada	Media (5)	6.5%	💥 Exploit	Microburst Ustorekeeper Online Shopping System	18/6/2001	16/6/2026	Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVE-2000-1243	Modificada	Media (5)	1.1%	—	Dansie Shopping Cart	31/12/2000	23/9/2026	Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers.
CVE-2000-0921	Modificada	Media (5)	8.1%	💥 Exploit	Hassan Consulting Shopping Cart	19/12/2000	23/9/2026	Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
CVE-2000-0926	Modificada	Alta (7.5)	7.0%	💥 Exploit	Smartwin Technology Cyberoffice Shopping Cart	19/12/2000	25/9/2026	SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
CVE-2000-0925	Modificada	Media (5)	7.9%	💥 Exploit	Smartwin Technology Cyberoffice Shopping Cart	19/12/2000	23/9/2026	The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
CVE-2000-0401	Modificada	Alta (7.5)	2.4%	—	Pdgsoft PDG Shopping Cart	1/5/2000	16/6/2026	Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.
CVE-2000-0254	Modificada	Media (5)	6.0%	💥 Exploit	Craig Dansie Dansie Shopping Cart	14/4/2000	16/6/2026	The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
CVE-2000-0253	Modificada	Alta (10)	2.5%	—	Craig Dansie Dansie Shopping Cart	11/4/2000	16/6/2026	The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.
CVE-2000-0252	Modificada	Media (5)	2.2%	—	Craig Dansie Dansie Shopping Cart	11/4/2000	16/6/2026	The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
CVE-1999-0608	Modificada	Media (5)	1.3%	—	Pdgsoft PDG Shopping Cart	1/4/1999	16/6/2026	An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.