Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2687▼ 562 respecto a la semana anterior

Críticas / altas1259▼ 239 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 239 respecto a la semana anterior

207 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2007-5149	Modificada	Media (6.8)	3.0%	💥 Exploit	North Country Public Radio Public Media Manager	1/10/2007	16/6/2026	PHP remote file inclusion vulnerability in NewsCMS/news/newstopic_inc.php in North Country Public Radio Public Media Manager (PMM) 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the indir parameter.
CVE-2007-4923	Modificada	Media (6.8)	42%	💥 Exploit	Joomla Radio	17/9/2007	16/6/2026	PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
CVE-2005-2866	Modificada	Media (4.6)	0.69%	💥 Exploit	Mercora Imradio^AI	8/9/2005	16/6/2026	Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which allows local users to gain privileges.
CVE-2002-1504	Modificada	Media (5)	1.9%	—	Radiobird Software Webserver 4 Everyone	2/4/2003	16/6/2026	Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a URL.
CVE-2002-1941	Modificada	Media (5)	1.8%	—	Radiobird Software WEB Server 4 Everyone	31/12/2002	16/6/2026	Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request with the Host header set.
CVE-2002-1212	Modificada	Media (5)	1.8%	—	Radiobird Software Webserver 4 ALL	28/10/2002	16/6/2026	Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
CVE-2002-1213	Modificada	Media (5)	1.9%	—	Radiobird Software Webserver 4 ALL	28/10/2002	16/6/2026	Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." (dot-dot) sequences containing URL-encoded forward slash ("%2F") characters.