Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3199▲ 618 respecto a la semana anterior

Críticas / altas1507▲ 108 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 1 respecto a la semana anterior

Sin puntuar (sin CVSS)236▲ 222 respecto a la semana anterior

2412 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2002-0611	Modificada	Media (5)	8.3%	💥 Exploit	Craig Patchett Fileseek	18/6/2002	16/6/2026	Directory traversal vulnerability in FileSeek.cgi allows remote attackers to read arbitrary files via a ....// (modified dot dot) in the (1) head or (2) foot parameters, which are not properly filtered.
CVE-2002-0612	Modificada	Alta (7.5)	3.4%	💥 Exploit	Craig Patchett Fileseek	18/6/2002	16/6/2026	FileSeek.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) head or (2) foot parameters.
CVE-2001-1165	Modificada	Media (4.6)	0.49%	💥 Exploit	Intego Diskguard Intego Fileguard	1/4/2002	16/6/2026	Intego FileGuard 4.0 usa cifrado debil para almacenar información de usuario y contraseñas, lo que permite a usuarios locales ganar privilegios descifrando la información, por ejemplo con la herramienta Disengage.
CVE-2001-1463	Modificada	Alta (7.5)	3.2%	—	Solarwinds Serv-u File Server	19/11/2001	16/6/2026	The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password (OTP) authentication is enabled, which allows remote attackers to sniff passwords.
CVE-2001-0623	Modificada	Media (4.6)	0.80%	💥 Exploit	Sendfile	2/8/2001	16/6/2026	sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.
CVE-2001-0054	Modificada	Media (5)	12%	💥 Exploit	Solarwinds Serv-u File Server	16/2/2001	16/6/2026	Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. (dot dot) attack.
CVE-2000-0977	Modificada	Media (5)	8.6%	💥 Exploit	Oatmeal Studios Mail File	19/12/2000	23/9/2026	El programa CGI mailfile.cgi en MailFile 1.10 permite a atacantes remotos leer archivos arbitrarios especificando el nombre del archivo objetivo en el parámetro 'filename' en una solicitud POST, que luego es enviado por correo electrónico a la dirección especificada en el parámetro 'email'.
CVE-2000-0386	Modificada	Alta (7.5)	1.4%	—	Filemaker	2/5/2000	16/6/2026	FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
CVE-2000-0385	Modificada	Media (5)	1.6%	—	Filemaker	2/5/2000	16/6/2026	FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.
CVE-2000-0123	Modificada	Alta (7.5)	2.1%	—	Filemaker	1/2/2000	16/6/2026	The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
CVE-1999-1154	Modificada	Alta (7.5)	2.4%	—	Lakeweb Filemail CGI Script	9/11/1998	16/6/2026	LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
CVE-1999-1295	Modificada	Media (4.6)	0.34%	—	Transarc DCE Distributed File System	17/9/1996	16/6/2026	Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS.