Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 546 respecto a la semana anterior

Críticas / altas1325▼ 174 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)268▼ 241 respecto a la semana anterior

159 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2004-1547	Modificada	Media (5)	2.1%	—	Onnuri Infotek Activepost Standard	31/12/2004	16/6/2026	The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long filename, possibly triggering a buffer overflow.
CVE-2004-1548	Modificada	Media (5)	1.8%	—	Onnuri Infotek Activepost Standard	31/12/2004	16/6/2026	Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. (dot dot) in the filename.
CVE-2004-1549	Modificada	Media (5)	1.6%	—	Onnuri Infotek Activepost Standard	31/12/2004	16/6/2026	The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection.
CVE-2004-2616	Modificada	Media (4)	1.2%	—	Onnuri Infotek Activepost Standard	31/12/2004	16/6/2026	The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to obtain sensitive information by uploading a file, which reveals the path in a success message.
CVE-2004-2129	Modificada	Media (5)	3.4%	💥 Exploit	Loom Software Surfnow Professional Loom Software Surfnow Standard	31/12/2004	16/6/2026	SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow.
CVE-2004-1679	Modificada	Media (5)	1.7%	—	Jigunet Twinftp Enterprise Jigunet Twinftp Standard	4/8/2004	16/6/2026	Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ (triple dot) in the (1) CWD, (2) STOR, or (3) RETR commands.
CVE-2004-1760	Modificada	Alta (10)	3.8%	—	Cisco Emergency Responder Cisco IP Call Center Express Enhanced Cisco IP Call Center Express Standard Cisco IP Interactive Voice Response+13	21/1/2004	16/6/2026	The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
CVE-2004-1759	Modificada	Media (5)	2.4%	—	Cisco Emergency Responder Cisco IP Call Center Express Enhanced Cisco IP Call Center Express Standard Cisco IP Interactive Voice Response+13	21/1/2004	16/6/2026	Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.
CVE-2002-0098	Modificada	Alta (7.5)	6.9%	💥 Exploit	Boozt Standard	25/3/2002	16/6/2026	Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.