Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

31 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2008-6328	Modificada	Alta (7.5)	1.0%	💥 Exploit	Butterflymedia Butterfly Organizer	27/2/2009	16/6/2026	SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-6311	Modificada	Alta (7.5)	1.1%	💥 Exploit	Butterflymedia Butterfly Organizer	27/2/2009	16/6/2026	SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name.
CVE-2006-6246	Modificada	Alta (7.5)	1.7%	—	Photo Organizer	4/12/2006	16/6/2026	Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to (1) camera del, (2) camera edit, (3) folder/album deletion, (4) photo.move, (5) content.indexer, (6) folder.content, and possibly other operations.
CVE-2006-6245	Modificada	Alta (7.5)	1.2%	—	Photo Organizer	4/12/2006	16/6/2026	Multiple SQL injection vulnerabilities in Photo Organizer (PO) 2.32b and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2006-5238	Modificada	Alta (10)	1.6%	—	Blue Smiley Organizer	12/10/2006	16/6/2026	Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors.
CVE-2006-5237	Modificada	Alta (7.5)	1.2%	—	Blue Smiley Organizer	12/10/2006	16/6/2026	SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.