Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior

Críticas / altas1324▼ 116 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior

158 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2005-3741	Modificada	Alta (7.5)	1.1%	—	Almondsoft Almond Classifieds	22/11/2005	16/6/2026	Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions.
CVE-2005-2979	Modificada	Alta (7.5)	1.2%	💥 Exploit	Phpoutsourcing Noahs Classifieds	20/9/2005	16/6/2026	SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitrary SQL commands via the rollid parameter.
CVE-2005-2980	Modificada	Media (4.3)	1.8%	💥 Exploit	Phpoutsourcing Noahs Classifieds	20/9/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers to inject arbitrary web script or HTML via the rollid parameter.
CVE-2003-1520	Modificada	Media (6.8)	1.1%	💥 Exploit	Fuzzymonkey Myclassifieds	31/12/2003	16/6/2026	SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVE-2003-1145	Modificada	Media (6.8)	4.2%	💥 Exploit	Openautoclassifieds Openauto Classifieds^AI	3/11/2003	16/6/2026	Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter.
CVE-2002-1702	Modificada	Media (4.3)	1.7%	💥 Exploit	Deltascripts PHP Classifieds	31/12/2002	16/6/2026	Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter.
CVE-2002-1600	Modificada	Media (5)	3.2%	—	Mike Spice MY Classifieds	9/1/2002	16/6/2026	Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter.
CVE-2001-1290	Modificada	Media (5)	6.5%	💥 Exploit	Active WEB Suite Technologies Active Classifieds	28/6/2001	16/6/2026	admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter.