Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior

Críticas / altas1264▼ 228 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior

133 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-0622	Modificada	Alta (7.4)	0.60%	—	DHC Online Shop	26/7/2018	17/6/2026	The DHC Online Shop App for Android version 3.2.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6618	Modificada	Media (4.3)	1.9%	—	Your Online Shop Project Your Online Shop	30/9/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in Your Online Shop allows remote attackers to inject arbitrary web script or HTML via the products_id parameter.
CVE-2014-5904	Modificada	Media (5.4)	0.27%	—	Miniinthebox Online Shopping	15/9/2014	17/6/2026	The MiniInTheBox Online Shopping (aka com.miniinthebox.android) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2010-4844	Modificada	Alta (7.5)	1.2%	💥 Exploit	Mhproducts Easy Online Shop	27/9/2011	16/6/2026	SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter.
CVE-2006-5534	Modificada	Media (4.3)	1.2%	—	Zwahlen Informatik Online Shop	26/10/2006	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in index.htm in Zwahlen Online Shop Freeware 5.2.2.50, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) Kat, (3) id, or (4) no parameters. NOTE: some of these details are obtained from third party information.
CVE-2006-5512	Modificada	Media (4.3)	1.7%	💥 Exploit	Zwahlen Informatik Online Shop	25/10/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
CVE-2001-1014	Modificada	Alta (7.5)	2.3%	—	Michael Boehme Webdiscount E Shop Online Shop System	15/9/2001	16/6/2026	eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter.
CVE-2001-0466	Modificada	Media (5)	6.5%	💥 Exploit	Microburst Ustorekeeper Online Shopping System	18/6/2001	16/6/2026	Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.