Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2730▼ 572 respecto a la semana anterior

Críticas / altas1301▼ 186 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)295▼ 215 respecto a la semana anterior

82 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2010-1906	Modificada	Alta (7.2)	4.0%	—	Consona Dynamic Agent Consona Repair Manager Consona Subscriber Activation Consona Subscriber Agent	12/5/2010	16/6/2026	tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \\.\pipe\__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the…
CVE-2010-1905	Modificada	Media (4.3)	2.5%	💥 Exploit	Consona Live Assistance Consona Dynamic Agent Consona Subscriber Assistance	12/5/2010	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attackers to inject arbitrary web script or HTML via crafted input to ASP pages, as demonstrated using the backurl parameter to sdccommon/verify/asp/n6plugindestructor.asp.
CVE-2009-1287	Modificada	Media (4.3)	23%	💥 Exploit	Cisco Subscriber Edge Services Manager	13/4/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: some of these details are obtained from third party information.
CVE-2007-3249	Modificada	Media (4.3)	1.9%	💥 Exploit	Joomla Letterman Subscriber	18/6/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in mod_lettermansubscribe.php in the Letterman Subscriber (mod_letterman) before 1.2.5 module for Joomla! allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter.
CVE-2007-0518	Modificada	Alta (7.5)	2.5%	💥 Exploit	Scriptsez Smart PHP Subscriber	26/1/2007	16/6/2026	Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain encoded passwords via a direct request for pwd.txt.
CVE-2006-1961	Modificada	Alta (7.5)	2.7%	—	Cisco User Registration Tool Cisco Wireless LAN Solution Engine Ciscoworks 2000 Service Management Solution Cisco Hosting Solution Engine+1	21/4/2006	16/6/2026	Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell…
CVE-2005-4794	Modificada	Media (5)	2.4%	—	Cisco Application AND Content Networking Software Cisco ATA Cisco Subscriber Edge Services Manager Cisco IP Phone 7902+3	31/12/2005	16/6/2026	Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a denial of service (crash or instability) via a compressed DNS packet with a label length byte with an incorrect offset.