Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3198▲ 619 respecto a la semana anterior

Críticas / altas1503▲ 126 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 1 respecto a la semana anterior

Sin puntuar (sin CVSS)243▲ 229 respecto a la semana anterior

2261 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2002-1896	Modificada	Alta (7.2)	1.6%	💥 Exploit	Alsaplayer	31/12/2002	16/6/2026	Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command line argument.
CVE-2002-2229	Modificada	Media (5)	1.5%	—	Sapio Design LTD Webreflex	31/12/2002	16/6/2026	Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request.
CVE-2002-0892	Modificada	Media (5)	7.6%	💥 Exploit	NEW Atlanta Communications Servletexec Isapi	4/10/2002	16/6/2026	The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.
CVE-2002-0894	Modificada	Media (5)	3.3%	💥 Exploit	NEW Atlanta Communications Servletexec Isapi	4/10/2002	16/6/2026	NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.
CVE-2002-0893	Modificada	Media (5)	8.3%	💥 Exploit	NEW Atlanta Communications Servletexec Isapi	4/10/2002	16/6/2026	Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.
CVE-2001-1144	Modificada	Media (5)	5.8%	—	Mcafee Asap Virusscan	11/7/2001	16/6/2026	Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
CVE-2001-0366	Modificada	Alta (7.2)	0.56%	—	SAP R 3 WEB Application Server Demo Saposcol	27/6/2001	16/6/2026	saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program.
CVE-2001-0298	Modificada	Media (5)	7.1%	💥 Exploit	Sapio Design LTD Webreflex	3/5/2001	16/6/2026	Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
CVE-2000-0593	Modificada	Media (5)	1.7%	—	Sapporoworks Winproxy	27/6/2000	16/6/2026	WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number.
CVE-2000-0592	Modificada	Alta (7.5)	3.5%	💥 Exploit	Sapporoworks Winproxy	27/6/2000	16/6/2026	Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands.
CVE-1999-0699	Modificada	Alta (7.5)	1.1%	—	Bluestone Sapphire WEB	11/4/2000	16/6/2026	The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.