Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior

Críticas / altas1264▼ 228 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior

180 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2008-0069	Modificada	Media (6.8)	8.4%	💥 Exploit	Pierreegougelet Xnview	2/4/2008	16/6/2026	Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow (.sld) file, a different vector than CVE-2008-1461.
CVE-2008-1461	Modificada	Alta (7.6)	11%	💥 Exploit	Xnview	24/3/2008	16/6/2026	Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker.
CVE-2008-0064	Modificada	Alta (9.3)	4.6%	—	Pierreegougelet GFL SDK Pierreegougelet Nconvert Pierreegougelet Xnview	31/1/2008	16/6/2026	Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.
CVE-2007-2194	Modificada	Alta (10)	19%	💥 Exploit	Gentoo Xnview	24/4/2007	16/6/2026	Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information.
CVE-2005-4595	Modificada	Alta (7.2)	0.42%	—	Gentoo Nview Gentoo Xnview	31/12/2005	16/6/2026	Untrusted search path vulnerability (RPATH) in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current working directory.