Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2738▼ 488 respecto a la semana anterior

Críticas / altas1301▼ 189 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

139 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2007-6270	Modificada	Media (4.3)	2.3%	💥 Exploit	Xigla Absolute News Manager.net	7/12/2007	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) rmore parameter to xlaabsolutenm.aspx and the (2) template parameter to pages/default.aspx.
CVE-2007-6269	Modificada	Alta (7.5)	2.9%	💥 Exploit	Xigla Absolute News Manager.net	7/12/2007	16/6/2026	Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.
CVE-2007-6271	Modificada	Media (5)	2.7%	💥 Exploit	Xigla Absolute News Manager.net	7/12/2007	16/6/2026	Absolute News Manager.NET 5.1 allows remote attackers to obtain sensitive information via a direct request to getpath.aspx, which reveals the installation path in an error message.
CVE-2007-4630	Modificada	Media (4.3)	2.0%	💥 Exploit	Xigla Absolute Poll Manager XE	31/8/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVE-2007-1469	Modificada	Alta (7.5)	1.2%	💥 Exploit	Xigla Absolute Image Gallery XE	16/3/2007	16/6/2026	SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.
CVE-2007-0018	Modificada	Alta (9.3)	36%	💥 Exploit	Altdo Convert MP3 Master Altdo MP3 Record AND Edit Audio Master Americanshareware MP3 WAV Converter Audio Edit Magic+77	24/1/2007	16/6/2026	Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and…
CVE-2006-1416	Modificada	Media (4.3)	1.3%	—	Xigla Absolute FAQ Manager .net	28/3/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter.
CVE-2006-1410	Modificada	Media (4.3)	1.3%	—	Xigla Absolute Live Support XE	28/3/2006	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Screen name or (2) Session Topic field.
CVE-2006-1411	Modificada	Media (4.3)	1.2%	—	Xigla Absolute Image Gallery XE	28/3/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters.
CVE-2005-4401	Modificada	Media (4.3)	1.2%	—	Lutece	20/12/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in Lutece 1.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the query parameter.
CVE-2005-4295	Modificada	Media (4.3)	1.2%	—	Xigla Absolute Image Gallery XE	16/12/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2005-1879	Modificada	Media (5.5)	0.39%	—	Lutelwall	9/6/2005	16/6/2026	LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.
CVE-2003-0046	Modificada	Media (4.6)	0.36%	—	Celestial Software Absolutetelnet	19/2/2003	16/6/2026	AbsoluteTelnet SSH2 client does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
CVE-2003-1090	Modificada	Alta (10)	12%	💥 Exploit	Celestial Software Absolutetelnet	6/2/2003	16/6/2026	Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.