Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior

Críticas / altas1264▼ 228 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior

206 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-2106	Modificada	Alta (7.5)	1.1%	—	Projektseminar Proservice WWU Virtual Civil Services	17/6/2009	16/6/2026	SQL injection vulnerability in the Virtual Civil Services (civserv) extension 4.3.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-3849	Modificada	Media (4.3)	1.1%	—	Civic-cms	27/8/2008	16/6/2026	Cross-site scripting (XSS) vulnerability in the calendar controller in Civic Website Manager before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving (1) month, (2) day, and (3) year fields.
CVE-2007-3459	Modificada	Media (6.4)	2.9%	💥 Exploit	Civiltech Avax Vector Activex	27/6/2007	16/6/2026	A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the WriteMovie method.
CVE-2006-7231	Modificada	Alta (7.5)	0.91%	💥 Exploit	Civica Software Civica	31/12/2006	16/6/2026	SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL commands via the Entry parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2006-4088	Modificada	Media (4.3)	1.2%	—	Civicspace	11/8/2006	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in CivicSpace 0.8.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Subject, (2) Comment, and (3) Add new comment sections.
CVE-2005-4710	Modificada	Media (4.6)	0.59%	—	Autodesk 3DS MAX Autodesk Architectural Desktop Autodesk Autocad Autodesk Autocad Civil 3D+14	31/12/2005	16/6/2026	Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows remote attackers to "gain inappropriate access to another local user's computer," aka ID DL5549329.