Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior

Críticas / altas1324▼ 116 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior

108 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2004-0036	Modificada	Media (5)	1.2%	—	Jelsoft Vbulletin	20/1/2004	16/6/2026	SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter.
CVE-2003-0295	Modificada	Media (6.8)	1.6%	💥 Exploit	Jelsoft Vbulletin	16/6/2003	16/6/2026	Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability.
CVE-2002-1679	Modificada	Media (4.3)	1.2%	—	Jelsoft Vbulletin	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script as other users by injecting script into a bulletin board message.
CVE-2002-1678	Modificada	Media (4.3)	1.2%	—	Jelsoft Vbulletin	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits.
CVE-2002-1660	Modificada	Alta (7.5)	11%	💥 Exploit	Jelsoft Vbulletin	31/12/2002	16/6/2026	calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.
CVE-2002-1922	Modificada	Media (4.3)	3.6%	💥 Exploit	Jelsoft Vbulletin	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url variables.
CVE-2002-2235	Modificada	Media (5)	2.1%	💥 Exploit	Jelsoft Vbulletin	31/12/2002	16/6/2026	member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting (XSS) and possibly other attacks.
CVE-2001-0475	Modificada	Alta (7.5)	2.8%	—	Jelsoft Vbulletin	27/6/2001	16/6/2026	index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.