Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3142▲ 566 respecto a la semana anterior

Críticas / altas1456▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 1 respecto a la semana anterior

Sin puntuar (sin CVSS)301▲ 287 respecto a la semana anterior

2111 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2002-1026	Modificada	Media (5)	2.8%	—	Macromedia Sitespring	4/10/2002	16/6/2026	Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow.
CVE-2002-1121	Modificada	Alta (7.5)	6.7%	—	GFI Mailsecurity Network Associates Webshield Smtp Roaring Penguin Canit Roaring Penguin Mimedefang+1	24/9/2002	16/6/2026	motores de filtrado de contenido SMTP, incluyendo GFI MailSecurity para Exchange/SMTP anteriores a 7.2 InterScan VirusWall anteriores a 3.52 compilación 1494 la configuración por defecto de MIMEDefang anteriores a 2.21 y posiblemente otros productos, no detectan correos electrónicos fragmentados como se define en la…
CVE-2002-0437	Modificada	Alta (10)	3.4%	—	Stefan Frings SMS Server Tools	26/7/2002	16/6/2026	Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.
CVE-2001-1575	Modificada	Media (5)	1.9%	—	Apple Personal WEB Sharing	31/12/2001	16/6/2026	Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a long password, possibly due to a buffer overflow.
CVE-2001-1438	Modificada	Media (5)	2.1%	—	Palm OS Handspring Visor	22/10/2001	16/6/2026	Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image.
CVE-2001-0649	Modificada	Media (5)	5.1%	💥 Exploit	Apple Personal WEB Sharing	20/9/2001	16/6/2026	Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.
CVE-2001-0141	Modificada	Baja (1.2)	0.32%	—	Gert Doering Mgetty	12/3/2001	16/6/2026	mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
CVE-2001-0026	Modificada	Media (5)	8.4%	💥 Exploit	Roaring Penguin Pppoe	12/2/2001	16/6/2026	rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option.
CVE-2000-0691	Modificada	Baja (2.1)	0.92%	💥 Exploit	Gert Doering Mgetty	20/10/2000	16/6/2026	The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file.
CVE-2000-0058	Modificada	Media (5)	1.4%	—	Handspring Visor Network Hotsync	5/1/2000	16/6/2026	Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files.
CVE-1999-1528	Modificada	Media (4.6)	0.33%	—	Prosoft Engineering Netware Client	14/11/1999	16/6/2026	ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session.