Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior

Críticas / altas1415▲ 65 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

31 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2010-2799	Modificada	Media (6.8)	2.8%	—	Dest-unreach Socat	14/9/2010	16/6/2026	Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments.
CVE-2009-4082	Modificada	Alta (7.5)	3.0%	💥 Exploit	Lanifex Outreach Project Tool	29/11/2009	16/6/2026	PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter.
CVE-2008-5676	Modificada	Media (5)	1.5%	—	Breach Modsecurity	19/12/2008	16/6/2026	Multiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service (daemon crash) or bypass the product's functionality via unknown vectors related to…
CVE-2006-4239	Modificada	Alta (7.5)	2.8%	💥 Exploit	Outreach Project Tool OPT MAX	21/8/2006	16/6/2026	PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool (OPT) Max 1.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_inc parameter.
CVE-2005-2329	Modificada	Media (4.6)	1.4%	—	MRV Communications In-reach Lx-8000s^AI MRV Communications In-reach Lx-4000s^AI MRV Communications In-reach Lx-1000s^AI	20/7/2005	16/6/2026	MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not properly restrict access to ports, which allows remote authenticated users to access the consoles of other users.
CVE-2003-1353	Modificada	Media (4.3)	1.0%	—	Lanifex Outreach Project Tool	31/12/2003	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in Outreach Project Tool (OPT) 0.946b allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the news field.