Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior

Críticas / altas1293▼ 208 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior

80 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2004-2057	Modificada	Alta (7.5)	1.5%	—	Xlinesoft Asprunner	31/12/2004	16/6/2026	SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.
CVE-2004-2059	Modificada	Media (5)	8.8%	💥 Exploit	Xlinesoft Asprunner	31/12/2004	16/6/2026	Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp.
CVE-2004-2060	Modificada	Media (5)	7.9%	💥 Exploit	Xlinesoft Asprunner	31/12/2004	16/6/2026	ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable based on table and field names.
CVE-2001-1206	Modificada	Alta (7.5)	1.9%	—	Matrixs CGI Vault Last Lines	30/12/2001	16/6/2026	Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.
CVE-2001-1205	Modificada	Media (5)	2.6%	—	Matrixs CGI Vault Last Lines	30/12/2001	16/6/2026	Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.