Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 554 respecto a la semana anterior

Críticas / altas1325▼ 178 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)268▼ 242 respecto a la semana anterior

182 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2013-1823	Modificada	Media (4.3)	1.9%	—	Redhat Subscription Asset Manager	2/4/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.
CVE-2012-6119	Modificada	Baja (2.1)	0.42%	—	Candlepinproject Candlepin Redhat Subscription Asset Manager	2/4/2013	16/6/2026	Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.
CVE-2011-5136	Modificada	Media (6.4)	1.6%	—	Epractizelabs Subscription Manager	30/8/2012	16/6/2026	showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter.
CVE-2009-4339	Modificada	Alta (7.5)	1.1%	—	Stephan Vits MF Subscription	17/12/2009	16/6/2026	SQL injection vulnerability in the Subscription (mf_subscription) extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVE-2007-5407	Modificada	Media (6.8)	40%	💥 Exploit	Joomlaequipment Jcontentsubscription	12/10/2007	16/6/2026	Multiple PHP remote file inclusion vulnerabilities in the JContentSubscription (com_jcs) 1.5.8 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) jcs.function.php; (2) add.php, (3) history.php, and (4) register.php, in view/; and (5)…
CVE-2007-0402	Modificada	Media (6.8)	1.2%	—	Easebay Resources Paypal Subscription Manager	22/1/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in admin/edit_member.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter.
CVE-2007-0403	Modificada	Alta (7.5)	1.2%	—	Easebay Resources Paypal Subscription Manager	22/1/2007	16/6/2026	SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter.