Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2817▼ 183 respecto a la semana anterior

Críticas / altas1372▲ 48 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2002-1361	Modificada	Alta (10)	12%	—	SUN Cobalt RAQ 4	23/12/2002	16/6/2026	overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter.
CVE-2002-0430	Modificada	Baja (3.7)	0.91%	—	SUN Cobalt RAQ 2 SUN Cobalt RAQ 3I SUN Cobalt RAQ 4	12/8/2002	16/6/2026	MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
CVE-2002-0348	Modificada	Alta (7.5)	7.7%	—	SUN Cobalt RAQ 2 SUN Cobalt RAQ 3I SUN Cobalt RAQ 4	25/6/2002	16/6/2026	service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
CVE-2002-0347	Modificada	Media (5)	5.6%	—	SUN Cobalt RAQ 2 SUN Cobalt RAQ 3I SUN Cobalt RAQ 4	25/6/2002	16/6/2026	Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
CVE-2002-0346	Modificada	Alta (7.5)	6.5%	—	SUN Cobalt RAQ 2 SUN Cobalt RAQ 3I SUN Cobalt RAQ 4	25/6/2002	16/6/2026	Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.