Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2624▼ 223 respecto a la semana anterior

Críticas / altas1373▲ 144 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-85448	Pendiente de análisis	Alta (8.7)	0.63%	—	Moos-ivp Ufldshorebroker^AI	3/9/2026	14/9/2026	MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory exhaustion and…
CVE-2026-85434	Pendiente de análisis	Crítica (9.3)	0.26%	—	Moos-ivp Ufldshorsebroker^AI	3/9/2026	8/9/2026	MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODE_BROKER_PING messages with crafted HostRecord data to redirect bridged variables to attacker-controlled addresses.
CVE-2008-5928	Modificada	Alta (7.5)	1.0%	—	Flds-script Flds	21/1/2009	16/6/2026	SQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-5779	Modificada	Alta (7.5)	1.0%	—	Flds Script Flds	30/12/2008	16/6/2026	SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-5778	Modificada	Alta (7.5)	1.2%	—	Flds Script Flds	30/12/2008	16/6/2026	SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the linkid parameter.