Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2537▼ 360 respecto a la semana anterior

Críticas / altas1344▲ 80 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-1920	Modificada	Media (5)	2.7%	—	Atmail Open	27/3/2012	16/6/2026	@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function.
CVE-2012-1919	Modificada	Media (6.4)	2.0%	—	Atmail Open	27/3/2012	16/6/2026	CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct directory traversal attacks and read arbitrary files via a %0A sequence followed by a .. (dot dot) in the file parameter.
CVE-2012-1918	Modificada	Media (5)	3.5%	—	Atmail Open	27/3/2012	16/6/2026	Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allow remote attackers to read arbitrary files via a .. (dot dot) in the Attachment[] parameter.
CVE-2012-1917	Modificada	Media (5)	2.2%	—	Atmail Open	27/3/2012	16/6/2026	compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique parameter, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ..././ (dot dot dot slash dot slash) sequence.
CVE-2012-1916	Modificada	Alta (7.5)	3.4%	—	Atmail Open	27/3/2012	16/6/2026	@Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an executable extension, leading to the creation of an executable file under tmp/.
CVE-2011-4540	Modificada	Media (4.3)	1.7%	—	Atmail Open	1/12/2011	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in AtMail Open (aka AtMail Open-Source edition) 1.04 allow remote attackers to inject arbitrary web script or HTML via the func parameter to (1) ldap.php or (2) search.php.