Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

38 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-2020	Modificada	Media (4.3)	1.3%	💥 Exploit	Virtuenetz Virtue News Manager	9/6/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter.
CVE-2009-2019	Modificada	Alta (7.5)	1.0%	💥 Exploit	Virtuenetz Virtue News Manager	9/6/2009	16/6/2026	SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter.
CVE-2009-2017	Modificada	Alta (7.5)	1.0%	💥 Exploit	Virtuenetz Virtue Book Store	9/6/2009	16/6/2026	SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2009-2016	Modificada	Alta (7.5)	1.0%	💥 Exploit	Virtuenetz Virtue Shopping Mall	9/6/2009	16/6/2026	SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2008-6483	Modificada	Alta (7.5)	26%	💥 Exploit	Virtuemart-solutions COM Googlebase	18/3/2009	16/6/2026	PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase or Froogle) component 1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVE-2007-5563	Modificada	Alta (7.5)	1.4%	—	Virtuemart	18/10/2007	16/6/2026	Unspecified vulnerability in VirtueMart before 1.0.13 allows remote attackers to execute arbitrary PHP code via unspecified vectors.
CVE-2007-3247	Modificada	Media (6.8)	1.2%	—	Virtuemart	18/6/2007	16/6/2026	SQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly related to improper input validation of the PATH_INFO (PHP_SELF) by virtuemart_parser.php.
CVE-2007-1361	Modificada	Media (4.3)	1.1%	—	Virtuemart	8/3/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in virtuemart_parser.php in VirtueMart before 20070213 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue is probably different than CVE-2007-0376.
CVE-2007-1096	Modificada	Media (6.8)	1.2%	—	Virtuemart	26/2/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in ps_cart.php in VirtueMart before 20070116 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue might overlap CVE-2007-0376.
CVE-2006-6945	Modificada	Alta (7.5)	1.3%	—	Virtuemart	19/1/2007	16/6/2026	SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) Itemid, (2) product_id, and category_id parameters as handled in virtuemart_parser.php.
CVE-2007-0376	Modificada	Media (6.8)	1.4%	—	Virtuemart	19/1/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2006-5096	Modificada	Media (6.8)	2.1%	💥 Exploit	Virtuemart Joomla Ecommerrce Edition CMS	29/9/2006	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla! eCommerce Edition CMS 1.0.11, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Itemid parameter in a (1) com_contact or (2) subscribe action.
CVE-2005-4829	Modificada	Alta (10)	1.3%	—	Virtuemart	31/12/2005	16/6/2026	VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors.