Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior

Críticas / altas1273▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior

108 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-3391	Modificada	Media (5.1)	1.3%	—	Imbccontents Activex Control	6/7/2006	16/6/2026	The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler.
CVE-2006-3134	Modificada	Alta (9.3)	11%	—	Gracenote Cddbcontrol Activex Control	27/6/2006	16/6/2026	Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.
CVE-2006-1172	Modificada	Media (5)	14%	💥 Exploit	TDC Cryptomathic Cenroll Activex Control	9/5/2006	16/6/2026	Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote attackers to execute arbitrary code via vectors related to the TDC Digital signature.
CVE-2006-2233	Modificada	Alta (7.5)	7.1%	💥 Exploit	Banktown Btcxctl20com Activex Control	5/5/2006	16/6/2026	Buffer overflow in BankTown Client Control (aka BtCxCtl20Com) 1.4.2.51817, and possibly 1.5.2.50209, allows remote attackers to execute arbitrary code via a long string in the first argument to SetBannerUrl. NOTE: portions of these details are obtained from third party information.
CVE-2005-0360	Modificada	Media (5)	12%	—	Microsoft LOG Sink Class Activex Control	5/7/2005	16/6/2026	The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files.
CVE-2003-1129	Modificada	Baja (2.6)	8.3%	💥 Exploit	Yahoo Audio Conferencing Activex Control	31/12/2003	16/6/2026	Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a URL with a long hostname to Yahoo! Messenger or Yahoo! Chat.
CVE-2002-1795	Modificada	Media (4.3)	17%	—	Microsoft Tsac Activex Control	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2002-0726	Modificada	Alta (7.5)	17%	—	Microsoft Tsac Activex Control	24/9/2002	16/6/2026	Buffer overflow in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to execute arbitrary code via a long server name field.