Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3007▼ 67 respecto a la semana anterior

Críticas / altas1403▲ 50 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)390▼ 120 respecto a la semana anterior

32 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-4533	Modificada	Media (5)	1.5%	—	Nathan Haug Webform	31/12/2009	16/6/2026	The Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, does not prevent caching of a page that contains token placeholders for a default value, which allows remote attackers to read session variables via unspecified vectors.
CVE-2009-4532	Modificada	Baja (3.5)	1.00%	—	Nathan Haug Webform	31/12/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform creation privileges, to inject arbitrary web script or HTML via a field label.
CVE-2009-4207	Modificada	Media (4.3)	1.1%	—	Nathan Haug Webform	4/12/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.7 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a submission.
CVE-2009-3067	Modificada	Media (4.3)	0.93%	—	Webformatique Reservation Manager	3/9/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in Reservation Manager allows remote attackers to inject arbitrary web script or HTML via the resman_startdate parameter.
CVE-2008-1794	Modificada	Media (4.3)	1.1%	—	Drupal Webform Module	15/4/2008	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x before 5.x-1.10, 5.x-2.x before 5.x-2.0-beta3, and 6.x before 6.x-1.0-beta3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2007-0547	Modificada	Media (4.3)	1.1%	—	Cgi-rescue Webform	29/1/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in CGI-RESCUE WebFORM 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2006-2943	Modificada	Alta (7.5)	1.7%	—	Cgi-rescue Webform	12/6/2006	16/6/2026	Unspecified vulnerability in CGI-RESCUE WebFORM 4.1 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obtained from third party information.