Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
39 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.91% | — | Xzeres 442sr OS | 19/3/2016 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |
| Modificada | Media (6.8) | 0.62% | — | Xzeres 442sr OS | 5/6/2015 | 17/6/2026 | Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request. | |
| Modificada | Media (6.8) | 0.63% | — | Xzeres 442sr OSXzeres 442sr | 31/3/2015 | 17/6/2026 | Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that modify the default user's password via a GET request. | |
| Modificada | Baja (2.1) | 0.28% | — | PXZ Project PXZ | 23/1/2015 | 17/6/2026 | Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions. | |
| Modificada | Media (4.3) | 0.85% | — | Xzeroscripts Xzero Community Classifieds | 21/8/2009 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | |
| Modificada | Media (4.3) | 0.85% | — | Xzeroscripts Xzero Community Classifieds | 21/8/2009 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | |
| Modificada | Media (4.3) | 1.5% | 💥 Exploit | Xzeroscripts Xzero Community Classifieds | 20/8/2009 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via (1) the postevent parameter in a post action or (2) the _xzcal_y parameter. | |
| Modificada | Alta (7.5) | 2.4% | 💥 Exploit | Xzero Scripts Xzero Community Classifieds | 28/12/2007 | 16/6/2026 | SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php. | |
| Modificada | Alta (7.5) | 2.3% | 💥 Exploit | Xzero Scripts Xzero Community Classifieds | 28/12/2007 | 16/6/2026 | PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path_escape parameter. | |
| Modificada | Media (6.4) | 7.0% | 💥 Exploit | Xzero Scripts Xzero Community Classifieds | 28/12/2007 | 16/6/2026 | Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pagename parameter in a page view action. | |
| Modificada | Alta (7.5) | 4.2% | — | Xzgv | 11/4/2006 | 16/6/2026 | Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required. | |
| Modificada | Alta (7.5) | 3.1% | — | Xzabite Dyndnsupdate | 2/5/2005 | 16/6/2026 | Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c, allow remote attackers who spoof a dyndns.org server to execute arbitrary code via unknown vectors. | |
| Modificada | Alta (10) | 5.1% | — | Xzgv Image ViewerZGV Image ViewerDebian Linux | 10/1/2005 | 16/6/2026 | Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that… | |
| Modificada | Alta (10) | 9.4% | 💥 Exploit | Xzgv Image ViewerZGV Image ViewerDebian Linux | 10/1/2005 | 16/6/2026 | Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be… |