Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2761▲ 5 respecto a la semana anterior

Críticas / altas1274▼ 254 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior

Sin puntuar (sin CVSS)245▲ 227 respecto a la semana anterior

1436 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2005-3829	Modificada	Alta (7.8)	1.8%	—	Activecampaign Knowledgebuilder	26/11/2005	16/6/2026	index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an invalid category parameter, which causes a large number of SQL queries to be processed.
CVE-2005-2293	Modificada	Media (5.5)	1.8%	—	Oracle Forms Builder	18/7/2005	16/6/2026	Oracle Formsbuilder 9.0.4 almacena nombres de usuarios y claves de bases de datos en un fichero temporal (que no se borra después de haber sido usado). Esto permite que usuarios locales obtengan información confidencial.
CVE-2005-2135	Modificada	Alta (7.5)	1.1%	—	Etoshop Dynamic BIZ Website Builder Quickweb	5/7/2005	16/6/2026	SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) T1 or (2) T2 parameters.
CVE-2004-0204	Modificada	Alta (7.5)	72%	💥 Exploit	BEA Weblogic Server Borland Software J Builder Businessobjects Crystal Enterprise Businessobjects Crystal Enterprise Java SDK+5	6/8/2004	16/6/2026	Vulnerabilidad de atravesamiento de directorios en los visores web de Business Objects Crystal Reports 9 and 10, y Crystal Enterprise 9 o 10, usados en Visual Studio .NET 2003 y Outlook 2003 con Business Contact Manager, Microsoft Business Solutions CRM 1.2, y otros productos, permiten a atacantes remotos leer y…
CVE-2003-1131	Modificada	Alta (7.5)	3.4%	💥 Exploit	Activecampaign Knowledgebuilder	31/12/2003	16/6/2026	PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to reference a URL on a remote web server that contains the code.
CVE-2003-0756	Modificada	Media (5)	1.7%	—	Sitebuilder	20/10/2003	16/6/2026	Directory traversal vulnerability in sitebuilder.cgi in SiteBuilder 1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the selectedpage parameter.
CVE-2002-0951	Modificada	Alta (10)	2.1%	💥 Exploit	Ruslan Communications Body Builder	4/10/2002	16/6/2026	SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.
CVE-2000-0917	Modificada	Alta (10)	79%	💥 Exploit	Caldera Openlinux Ebuilder Caldera Openlinux Caldera Openlinux Edesktop Caldera Openlinux Eserver+2	19/12/2000	23/9/2026	Vulnerabilidad de cadena de formato en la función use_syslog() en LPRng 3.6.24 permite a atacantes remotos ejecutar comandos arbitrarios.
CVE-2000-0844	Modificada	Alta (10)	16%	💥 Exploit	Caldera Openlinux Ebuilder Immunix Conectiva Linux SGI Irix+12	14/11/2000	16/6/2026	Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
CVE-2000-0594	Modificada	Media (5)	9.9%	💥 Exploit	Caldera Openlinux Desktop Caldera Openlinux Ebuilder Caldera Openlinux Edesktop Caldera Openlinux Eserver+2	4/7/2000	16/6/2026	BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.
CVE-1999-1536	Modificada	Alta (7.2)	0.35%	—	Acushop Salesbuilder	30/7/1999	16/6/2026	.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file.