Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2720▼ 598 respecto a la semana anterior

Críticas / altas1299▼ 202 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-32245	Aplazada	Media (6.5)	0.12%	—	Chaser324 Featured Posts Scroll^AI	16/5/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Chaser324 Featured Posts Scroll featured-posts-scroll allows Stored XSS.This issue affects Featured Posts Scroll: from n/a through <= 1.25.
CVE-2025-28905	Aplazada	Alta (7.1)	0.29%	—	Chaser324 Featured Posts Grid^AI	11/3/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chaser324 Featured Posts Grid featured-posts-grid allows Stored XSS.This issue affects Featured Posts Grid: from n/a through <= 1.7.
CVE-2024-51647	Aplazada	Alta (7.1)	0.17%	—	Chaser324 Featured Posts Scroll^AI	9/11/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Chaser324 Featured Posts Scroll allows Stored XSS.This issue affects Featured Posts Scroll: from n/a through 1.25.
CVE-2020-7883	Modificada	Crítica (9.8)	0.94%	—	Wowsoft Printchaser	28/12/2021	17/6/2026	Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.
CVE-2005-0693	Modificada	Alta (7.5)	3.1%	—	Jowood Productions Chaser	7/3/2005	16/6/2026	Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service (client or server crash) and execute arbitrary code via a long nickname.
CVE-2004-0247	Modificada	Media (5)	3.4%	💥 Exploit	Cauldron Chaser Client Cauldron Chaser Server	23/11/2004	16/6/2026	The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exception) via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory.