Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 449 respecto a la semana anterior

Críticas / altas1325▼ 128 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)268▼ 240 respecto a la semana anterior

83 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-7573	Modificada	Media (5.4)	0.27%	—	Harvestyourdata Droid Survey Offline Forms	20/10/2014	17/6/2026	The droid Survey Offline Forms (aka com.contact.droidSURVEY) application 2.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2008-2890	Modificada	Alta (7.5)	1.0%	💥 Exploit	Offl Online Fantasy Football League	27/6/2008	16/6/2026	Multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fflteam_id parameter to teams.php, the (2) league_id parameter to leagues.php, and the (3) player_id parameter to players.php.
CVE-2007-5097	Modificada	Crítica (9.8)	1.4%	—	Online Fantasy Football League Offl	26/9/2007	16/6/2026	PHP remote file inclusion vulnerability in lib/classes/offl_nflteam.php in Online Fantasy Football League (OFFL) 0.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter. NOTE: this issue is disputed by CVE because a __FILE__ test protects offl_nflteam.php against direct requests
CVE-2007-4809	Modificada	Alta (7.5)	56%	💥 Exploit	Online Fantasy Football League Offl	11/9/2007	16/6/2026	Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter to (1) lib/functions.php or (2) lib/header.php.
CVE-2003-0037	Modificada	Alta (7.5)	3.3%	—	Noffle	7/2/2003	16/6/2026	Buffer overflows in noffle news server 1.0.1 and earlier allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code.
CVE-2002-0818	Modificada	Alta (7.5)	4.1%	—	Wwwoffle	12/8/2002	16/6/2026	wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value.
CVE-2001-0038	Modificada	Media (5)	3.3%	💥 Exploit	Metaproducts Offline Explorer	16/2/2001	16/6/2026	Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL.
CVE-2000-0436	Modificada	Media (5)	7.1%	💥 Exploit	Metaproducts Offline Explorer	19/5/2000	16/6/2026	MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.