Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2739▼ 510 respecto a la semana anterior

Críticas / altas1303▼ 212 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior

463 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2002-0561	Modificada	Alta (7.5)	9.7%	—	Oracle Application Server Oracle Application Server WEB Cache Oracle8i Oracle9i	3/7/2002	16/6/2026	The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings.
CVE-2002-1641	Modificada	Alta (10)	9.1%	—	Oracle Application Server WEB Cache	27/5/2002	16/6/2026	Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors.
CVE-2002-0103	Modificada	Media (4.6)	0.61%	—	Oracle Application Server WEB Cache	25/3/2002	16/6/2026	An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.
CVE-2002-0102	Modificada	Media (5)	4.1%	—	Oracle Application Server WEB Cache	25/3/2002	16/6/2026	Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters.
CVE-2002-0107	Modificada	Media (5)	7.9%	💥 Exploit	Cacheflow Cacheos	25/3/2002	16/6/2026	Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
CVE-2001-0836	Modificada	Alta (7.5)	15%	💥 Exploit	Oracle Application Server WEB Cache	6/12/2001	16/6/2026	Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVE-2001-1023	Modificada	Media (5)	1.5%	—	Xcache Technologies Xcache	21/9/2001	16/6/2026	Xcache 2.1 allows remote attackers to determine the absolute path of web server documents by requesting a URL that is not cached by Xcache, which returns the full pathname in the Content-PageName header.
CVE-2001-1087	Modificada	Alta (7.5)	1.6%	—	Network Appliance Netcache	5/7/2001	16/6/2026	The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
CVE-2000-0906	Modificada	Media (5)	8.6%	💥 Exploit	Moreover.com Cached Feed.cgi Script	19/12/2000	23/9/2026	Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.
CVE-1999-1000	Modificada	Media (5)	2.0%	—	Cisco Cache Engine	16/12/1999	16/6/2026	The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.
CVE-1999-0998	Modificada	Media (5)	1.3%	—	Cisco Cache Engine	16/12/1999	16/6/2026	Cisco Cache Engine allows an attacker to replace content in the cache.
CVE-1999-1001	Modificada	Baja (2.6)	1.4%	—	Cisco Cache Engine	16/12/1999	16/6/2026	Cisco Cache Engine allows a remote attacker to gain access via a null username and password.
CVE-1999-0472	Modificada	Media (5)	1.8%	—	Snmp Network Appliance Netcache	7/4/1999	16/6/2026	The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.