Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior

Críticas / altas1415▲ 65 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

33 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2010-2033	Modificada	Alta (7.5)	16%	💥 Exploit	COM Perchacategoriestree	25/5/2010	16/6/2026	Directory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree) component 0.6 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
CVE-2010-0763	Modificada	Alta (7.5)	0.96%	💥 Exploit	Commodityrentals Vacation Rental Software	2/3/2010	16/6/2026	SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL commands via the rental_id parameter in a CalendarView action.
CVE-2008-7202	Modificada	Media (4.3)	1.1%	—	Openwebmail.acatysmoof Openwebmail	10/9/2009	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2008-3603	Modificada	Alta (7.5)	0.97%	💥 Exploit	Vacation Rentals Vacation Rental Script	12/8/2008	16/6/2026	SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sections action.
CVE-2006-2651	Modificada	Baja (2.6)	1.3%	—	Vacation Rentals Vacation Rental Script	30/5/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the obj parameter.
CVE-2005-0184	Modificada	Baja (2.1)	0.59%	—	Squirrelmail Vacation Plugin^AI	2/5/2005	16/6/2026	Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. (dot dot) in a get request.
CVE-2005-0183	Modificada	Alta (7.2)	0.40%	—	Squirrelmail Vacation Plugin	2/5/2005	16/6/2026	ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via shell metacharacters in a command line argument.
CVE-1999-0057	Modificada	Alta (7.5)	8.2%	—	Eric Allman Vacation Freebsd Hp-ux HP Vvos+3	16/11/1998	16/6/2026	Vacation program allows command execution by remote users through a sendmail command.