Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2761▲ 61 respecto a la semana anterior

Críticas / altas1285▼ 211 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior

Sin puntuar (sin CVSS)233▲ 215 respecto a la semana anterior

1356 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2002-2130	Modificada	Alta (7.5)	1.6%	—	Gallery Project Gallery	31/12/2002	16/6/2026	publish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERY_BASEDIR parameter to reference a URL on a remote web server that contains the code.
CVE-2002-2064	Modificada	Alta (7.5)	1.5%	—	Phpwebgallery	31/12/2002	16/6/2026	isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login cookie to pseudo.
CVE-2002-2123	Modificada	Alta (7.5)	2.4%	—	Gallery Project Gallery	31/12/2002	16/6/2026	PHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by specifying a URL to an init.php file in the GALLERY_BASEDIR parameter.
CVE-2002-1901	Modificada	Media (4.3)	0.95%	—	Bodo Bauer Bbgallery	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags.
CVE-2001-0900	Modificada	Media (5)	7.9%	💥 Exploit	Francisco Burzi Gallery	18/11/2001	16/6/2026	Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the include parameter.
CVE-2001-1234	Modificada	Alta (7.5)	3.5%	—	Gallery Project Gallery	2/10/2001	16/6/2026	Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.