Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2570▼ 329 respecto a la semana anterior
Críticas / altas1353▲ 95 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Baja (2.6) | 1.2% | — | NEW Atlanta Communications Bluedragon ServerNEW Atlanta Communications Bluedragon Server JX | 26/6/2006 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a (1) .cfm or (2) .cfml file, which reflects the result in the default error page. | |
| Modificada | Media (5) | 6.8% | — | NEW Atlanta Communications Bluedragon ServerNEW Atlanta Communications Bluedragon Server JX | 26/6/2006 | 23/9/2026 | BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file whose name contains an MS-DOS device name such as (1) con, (2) aux, (3) com1, and (4) com2. | |
| Modificada | Media (5) | 1.9% | — | Shadow OP Software Dragon Server | 16/6/2000 | 16/6/2026 | Dragon FTP server allows remote attackers to cause a denial of service via a long USER command. | |
| Modificada | Media (5) | 4.6% | — | Shadow OP Software Dragon Server | 16/6/2000 | 16/6/2026 | Dragon telnet server allows remote attackers to cause a denial of service via a long username. |