Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior

Críticas / altas1294▼ 234 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior

31 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2005-4336	Modificada	Media (4.3)	1.3%	—	Courseforum Projectforum	17/12/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) fwd parameter in admin/adminsignin.html and (2) originalpageid parameter in admin/newpage.html associated with a group.
CVE-2005-4335	Modificada	Alta (7.8)	1.8%	—	Courseforum Projectforum	17/12/2005	16/6/2026	ProjectForum 4.7.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted pageid parameter to admin/versions.html.
CVE-2005-3816	Modificada	Alta (7.5)	1.2%	💥 Exploit	Zoneo-soft Freeforum	26/11/2005	16/6/2026	Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter or (2) thread parameter in thread mode.
CVE-2005-1570	Modificada	Media (5)	1.2%	—	Battleaxe Software Bttlxeforum	14/5/2005	16/6/2026	forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability.
CVE-2004-2566	Modificada	Media (4.3)	1.7%	💥 Exploit	Liveworld Livechat Liveworld Livefocusgroup Liveworld Liveforum Liveworld Liveq AND A	31/12/2004	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&A, (3) LiveChat, and (4) LiveFocusGroup, allow remote attackers to inject arbitrary web script or HTML via the q parameter in (a) search.jsp, (b) findclub!execute.jspa, and (c) search!execute.jspa.
CVE-2003-0215	Modificada	Alta (7.5)	1.2%	💥 Exploit	Battleaxe Software Bttlxeforum	12/5/2003	16/6/2026	SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields.