Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 345 respecto a la semana anterior

Críticas / altas1316▼ 9 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 273 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-20524	Modificada	Media (6.1)	0.71%	—	Urlchatbox Chat Anywhere	27/12/2018	17/6/2026	The Chat Anywhere extension 2.4.0 for Chrome allows XSS via crafted use of <<a> in a message, because a danmuWrapper DIV element in chatbox-only\danmu.js is outside the scope of a Content Security Policy (CSP).
CVE-2005-0522	Modificada	Media (4.6)	0.56%	—	Lionmax Software Chat Anywhere	2/5/2005	16/6/2026	Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges.
CVE-2004-1802	Modificada	Media (5)	1.5%	—	Chat Anywhere^AI	31/12/2004	16/6/2026	Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page.
CVE-2004-2724	Modificada	Alta (7.1)	1.7%	—	Lionmax Software Chat Anywhere	31/12/2004	16/6/2026	LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a username beginning with percent (%) followed by a null character.