Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior

Críticas / altas1264▼ 228 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior

156 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-1426	Modificada	Alta (7.5)	2.0%	💥 Exploit	Pixel Motion Blog	28/3/2006	16/6/2026	Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parameter in index.php or bypass authentication via the (2) password parameter in admin/index.php.
CVE-2005-2896	Modificada	Alta (7.5)	1.2%	💥 Exploit	Stylemotion WEB News	14/9/2005	16/6/2026	SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_userpw parameter to startup.php, (2) cat, (3) id, or (4) stof parameter to news.php, or (5) id parameter to print.php.
CVE-2005-2897	Modificada	Media (5)	1.2%	—	Stylemotion WEB News	14/9/2005	16/6/2026	WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php.
CVE-2005-0335	Modificada	Media (5)	1.6%	—	Emotion Mediapartner WEB Server	2/5/2005	16/6/2026	Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVE-2005-0286	Modificada	Media (5)	1.4%	—	Emotion Mediapartner WEB Server	2/5/2005	16/6/2026	eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a (1) . (dot) or (2) + (plus sign) at the end, which returns the source code for that file.
CVE-2005-0336	Modificada	Media (4.3)	1.2%	—	Emotion Mediapartner WEB Server	2/5/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML.