Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2839▼ 348 respecto a la semana anterior

Críticas / altas1378▼ 43 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

107 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-0686	Modificada	Alta (10)	2.9%	—	Virtual Hosting Control System	15/2/2006	16/6/2026	add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access.
CVE-2005-3902	Modificada	Media (4.3)	2.2%	💥 Exploit	Virtual Hosting Control System	29/11/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 through 2.4.6.2 allows remote attackers to inject arbitrary web script or HTML via query strings that are included in an error message, as demonstrated using a parameter containing script.
CVE-2005-1128	Modificada	Alta (7.5)	1.1%	—	Virtual Hosting Control System	2/5/2005	16/6/2026	Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries.
CVE-2004-2635	Modificada	Alta (7.5)	1.9%	—	Mcafee Security Installer Control System	31/12/2004	16/6/2026	An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method.
CVE-2003-1342	Modificada	Media (5)	3.4%	💥 Exploit	Trend Micro Virus Control System	31/12/2003	16/6/2026	Trend Micro Virus Control System (TVCS) 1.8 running with IIS allows remote attackers to cause a denial of service (memory consumption) in IIS via multiple URL requests for ActiveSupport.exe.
CVE-2003-1344	Modificada	Media (5)	2.5%	💥 Exploit	Trend Micro Virus Control System	31/12/2003	16/6/2026	Trend Micro Virus Control System (TVCS) Log Collector allows remote attackers to obtain usernames, encrypted passwords, and other sensitive information via a URL request for getservers.exe with the action parameter set to "selects1", which returns log files.
CVE-2001-0689	Modificada	Alta (7.5)	1.4%	—	Trend Micro Virus Control System	20/9/2001	16/6/2026	Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the configuration via a certain CGI program.