Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2748▲ 38 respecto a la semana anterior
Críticas / altas1479▲ 369 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (9.3) | 9.7% | — | Xampp Apache Distribution | 18/4/2007 | 16/6/2026 | The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the database server hostname, which allows remote attackers to trigger a library buffer overflow and execute arbitrary code via a long host parameter, or have other unspecified impact. NOTE: it could be… | |
| Modificada | Alta (7.5) | 0.97% | — | Xampp Apache Distribution | 18/4/2007 | 16/6/2026 | Multiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows allow remote attackers to execute arbitrary SQL commands via unspecified vectors in certain test scripts. | |
| Modificada | Media (5) | 1.6% | — | Xampp Apache Distribution | 17/6/2005 | 16/6/2026 | Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php. | |
| Modificada | Alta (7.5) | 4.7% | — | Xampp Apache Distribution | 12/4/2005 | 16/6/2026 | XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges. | |
| Modificada | Media (4.3) | 1.8% | — | Xampp Apache Distribution | 12/4/2005 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1) cds.php, (2) Guestbook-EN.pl, or (3) phonebook.php. |