Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 214 respecto a la semana anterior

Críticas / altas1385▲ 153 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-58964	Aplazada	Alta (7.1)	0.21%	—	Skygroup Enzy^AI	6/11/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4.
CVE-2014-5830	Modificada	Media (5.4)	0.26%	—	Farm Frenzy Gold Project Farm Frenzy Gold	9/9/2014	17/6/2026	The Farm Frenzy Gold (aka com.herocraft.game.farmfrenzy.gold) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2008-5075	Modificada	Media (6.8)	0.91%	—	Scriptsfrenzy E-uploader PRO	14/11/2008	16/6/2026	Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) img.php, (b) file.php, (c) mail.php, (d) thumb.php, (e) zip.php, and (f) zipit.php, and (2) the view parameter to…
CVE-2008-4902	Modificada	Alta (7.5)	1.00%	—	Scripts Frenzy Article Publisher PRO	4/11/2008	16/6/2026	SQL injection vulnerability in contact_author.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter.
CVE-2008-4901	Modificada	Alta (7.5)	0.97%	—	Scripts Frenzy Article Publisher PRO	4/11/2008	16/6/2026	SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVE-2006-6694	Modificada	Alta (7.5)	2.5%	—	Scriptsfrenzy.com E-uploader PRO	21/12/2006	16/6/2026	Directory traversal vulnerability in include/config.php in E-Uploader Pro 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a .. (dot dot) in the language parameter, as demonstrated by uploading a .JPG file containing PHP code, then accessing the file via config.php.
CVE-2006-1852	Modificada	Alta (7.5)	1.1%	—	Scriptsfrenzy Article Publisher PRO	19/4/2006	16/6/2026	SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter.