Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior

Críticas / altas1383▼ 38 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior

59 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2010-4026	Modificada	Media (6.2)	0.43%	—	HP Palm Webos	28/10/2010	16/6/2026	Unspecified vulnerability in the service API in HP Palm webOS 1.4.1 allows local users to gain privileges by leveraging the ability to perform certain service calls.
CVE-2010-4025	Modificada	Alta (9.3)	6.9%	—	HP Palm Webos	28/10/2010	16/6/2026	Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a crafted document, as demonstrated by a Word document.
CVE-2010-3306	Modificada	Media (5)	8.6%	💥 Exploit	Salvo G. Tomaselli Weborf	24/9/2010	16/6/2026	Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI.
CVE-2010-2435	Modificada	Media (5)	6.5%	💥 Exploit	Salvo Tomaselli Weborf Http Server	24/6/2010	16/6/2026	Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and possibly other headers.
CVE-2010-2262	Modificada	Media (5)	2.2%	—	Galileo Students Team Weborf	10/6/2010	16/6/2026	Galileo Students Team Weborf before 0.12.1 allows remote attackers to cause a denial of service (crash) via a crafted Range header.
CVE-2007-4726	Modificada	Media (5)	2.7%	💥 Exploit	Weboddity	5/9/2007	16/6/2026	Directory traversal vulnerability in Web Oddity 0.09b allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
CVE-2007-1391	Modificada	Alta (10)	5.0%	💥 Exploit	Webo	10/3/2007	16/6/2026	PHP remote file inclusion vulnerability in modules/abook/foldertree.php in Leo West WEBO (aka weborganizer) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter.
CVE-2001-1298	Modificada	Media (5)	1.5%	—	Grant Horwood Webodex	2/10/2001	16/6/2026	Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
CVE-2000-0299	Modificada	Media (5)	5.2%	💥 Exploit	Apple Webobjects	4/4/2000	16/6/2026	Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.