Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior

Críticas / altas1273▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior

111 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2007-2746	Modificada	Baja (3.5)	0.92%	—	Plain Black Webgui	17/5/2007	16/6/2026	The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use data structures containing privilege information, which allows remote authenticated users to obtain sensitive information or possibly have other unspecified impact.
CVE-2007-1706	Modificada	Alta (7.5)	1.0%	💥 Exploit	Ewebquiz	27/3/2007	16/6/2026	SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizID parameter.
CVE-2007-0703	Modificada	Alta (7.5)	2.6%	💥 Exploit	Webbuilder	4/2/2007	16/6/2026	PHP remote file inclusion vulnerability in library/StageLoader.php in WebBuilder 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[core][module_path] parameter.
CVE-2007-0629	Modificada	Media (6.4)	1.4%	—	Plain Black Webgui	31/1/2007	16/6/2026	The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unauthorized assets. NOTE: some of these details are obtained from third party information.
CVE-2007-0407	Modificada	Media (6.8)	1.4%	—	Plain Black Webgui	23/1/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote attackers to inject arbitrary web script or HTML via the username parameter during anonymous registration, a different vector than CVE-2007-0308. NOTE: it is possible that a separate "WikiPage titles"…
CVE-2007-0308	Modificada	Media (6.8)	1.2%	—	Plain Black Webgui	18/1/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.3.4 (beta) allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles.
CVE-2006-0680	Modificada	Media (5)	1.4%	—	Plain Black Webgui	15/2/2006	16/6/2026	Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL.
CVE-2006-0165	Modificada	Media (4.3)	1.2%	—	Plain Black Webgui	11/1/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2) name field of the default email form.
CVE-2005-4694	Modificada	Alta (7.5)	9.3%	💥 Exploit	Plain Black Webgui^AI	31/12/2005	16/6/2026	Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors.
CVE-2005-2837	Modificada	Alta (7.5)	1.7%	—	Plainblack Webgui	7/9/2005	16/6/2026	Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via (1) Help.pm, (2) International.pm, or (3) WebGUI.pm.
CVE-1999-0928	Modificada	Media (5)	5.2%	💥 Exploit	Smartdesk Websuite	23/5/1999	16/6/2026	Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.