Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior
Críticas / altas1294▼ 234 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
512 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Baja (3.6) | 0.27% | — | Globus Toolkit | 18/8/2006 | 16/6/2026 | Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by (1) myproxy-admin-adduser, (2) grid-ca-sign, and (3)… | |
| Modificada | Alta (7.5) | 2.6% | 💥 Exploit | Internet Scout Project Scout Portal Toolkit | 29/6/2006 | 16/6/2026 | SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter. | |
| Modificada | Media (5) | 1.5% | — | Paypal PHP Toolkit | 13/1/2006 | 16/6/2026 | Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipn_success.php. | |
| Modificada | Baja (3.6) | 0.34% | — | Paypal PHP Toolkit | 13/1/2006 | 16/6/2026 | Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows local users to view sensitive information (payment data), and (2) world-writable permissions for ipn/logs, which allows local users to… | |
| Modificada | Alta (7.8) | 3.9% | — | Sisco Ax-s4 IccpSisco Ax-s4 MMSSisco Iccp Toolkit FOR Mms-easeSisco Mms-ease | 31/12/2005 | 16/6/2026 | The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 and earlier, and the ICCP Toolkit for MMS-EASE 4.10 and earlier, allows remote attackers to cause a denial of service (process crash) via certain network traffic, as demonstrated using a Nessus scan. | |
| Modificada | Media (4.3) | 5.1% | 💥 Exploit | Internet Scout Scout Portal Toolkit | 13/12/2005 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the ss parameter in SPT--QuickSearch.php; (2) ParentId parameter in SPT--BrowseResources.php; (3) the ResourceId parameter in SPT--FullRecord.php;… | |
| Modificada | Alta (7.5) | 5.5% | 💥 Exploit | Internet Scout Scout Portal ToolkitInternet Scout Project Scout Portal Toolkit | 13/12/2005 | 16/6/2026 | Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the ParentId parameter in SPT--BrowseResources.php, (2) ResourceId parameter in SPT--FullRecord.php, (3) ResourceOffset parameter in SPT--Home.php, and (4) F_UserName… | |
| Modificada | Media (5) | 1.7% | — | Gamespy SDK Cd-key Validation Toolkit | 14/5/2005 | 16/6/2026 | Gamespy cd-key validation system allows remote attackers to cause a denial of service (cd-key already in use) by capturing and replaying a cd-key authorization session. | |
| Modificada | Alta (10) | 22% | 💥 Exploit | Xmlsoft LibxmlXmlsoft Libxml2Xmlstarlet Command Line XML ToolkitRedhat Fedora Core+2 | 1/3/2005 | 16/6/2026 | Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the… | |
| Modificada | Media (6.4) | 1.7% | — | Xmlstarlet Command Line XML Toolkit | 31/12/2004 | 16/6/2026 | Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code. | |
| Modificada | Alta (10) | 2.0% | — | Xmlstarlet Command Line XML Toolkit | 31/12/2004 | 16/6/2026 | Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml_select.c. | |
| Modificada | Alta (7.2) | 0.40% | — | TIS Internet Firewall Toolkit | 19/12/2000 | 23/9/2026 | Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name. |