Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2008-2765	Modificada	Alta (7.5)	1.2%	—	Xigla Absolute Image Gallery XE	18/6/2008	16/6/2026	SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.
CVE-2008-2766	Modificada	Media (4.3)	1.1%	—	Xigla Absolute Image Gallery XE	18/6/2008	16/6/2026	Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) admin/search.asp and (2) gallery.asp.
CVE-2007-1469	Modificada	Alta (7.5)	1.2%	—	Xigla Absolute Image Gallery XE	16/3/2007	16/6/2026	SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.
CVE-2006-1411	Modificada	Media (4.3)	1.2%	—	Xigla Absolute Image Gallery XE	28/3/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters.
CVE-2005-4295	Modificada	Media (4.3)	1.2%	—	Xigla Absolute Image Gallery XE	16/12/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.