Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior

Críticas / altas1288▼ 199 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

82 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-1049	Modificada	Media (4.3)	1.6%	💥 Exploit	Manageengine Admanager Plus	13/2/2012	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the (1) domainName parameter to jsp/AddDC.jsp or (2) operation parameter to DomainConfig.do.
CVE-2010-5050	Modificada	Media (4.3)	3.2%	—	Zohocorp Manageengine Admanager Plus	23/11/2011	16/6/2026	Cross-site scripting (XSS) vulnerability in jsp/admin/tools/remote_share.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…
CVE-2010-0999	Modificada	Alta (7.1)	1.7%	—	Freedownloadmanager Free Download Manager	17/5/2010	16/6/2026	Directory traversal vulnerability in Free Download Manager (FDM) before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
CVE-2010-0998	Modificada	Alta (10)	6.4%	—	Freedownloadmanager Free Download Manager	17/5/2010	16/6/2026	Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving (1) the folders feature in Site Explorer, (2) the websites feature in Site Explorer, (3) an FTP URI, or (4) a redirect.
CVE-2008-6261	Modificada	Alta (7.5)	0.97%	💥 Exploit	E-topbiz Admanager	24/2/2009	16/6/2026	SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL commands via the group parameter.
CVE-2008-5596	Modificada	Media (5)	2.6%	💥 Exploit	Dotnetindex Ikon Admanager	16/12/2008	16/6/2026	Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for ikonBAnner_AdManager.mdb.
CVE-2006-3037	Modificada	Baja (2.6)	1.2%	—	Site Trade ST Admanager Lite	15/6/2006	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, (3) article, (4) bio, and (5) name parameters.