Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 554 respecto a la semana anterior

Críticas / altas1325▼ 178 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)268▼ 242 respecto a la semana anterior

156 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2013-3600	Modificada	Alta (8.5)	1.5%	—	Trivantis Coursemill Learning Management System	6/9/2013	16/6/2026	Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspecified functions.
CVE-2013-3599	Modificada	Alta (9.3)	1.9%	—	Trivantis Coursemill Learning Management System	6/9/2013	16/6/2026	userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role value to home.html.
CVE-2007-6338	Modificada	Alta (7.5)	1.4%	—	Trivantis Coursemill Enterprise Learning Management System	15/12/2007	16/6/2026	SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers to execute arbitrary SQL commands via the user parameter (username field). NOTE: some of these details are obtained from third party information.
CVE-2007-1250	Modificada	Alta (7.5)	2.0%	💥 Exploit	Angel Learning Learning Management Suite	3/3/2007	16/6/2026	SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2002-1910	Modificada	Alta (7.5)	6.3%	💥 Exploit	Click-2 Ingenium Learning Management System	31/12/2002	16/6/2026	Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords.
CVE-2002-1909	Modificada	Media (5)	1.4%	—	Click2learn Ingenium Learning Management System	31/12/2002	16/6/2026	Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password.