Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2585▼ 302 respecto a la semana anterior

Críticas / altas1355▲ 99 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-48049	Aplazada	Media (5.3)	0.59%	—	Hapi Inert^AI	17/7/2026	23/7/2026	@hapi/inert provides static file and directory handlers for hapi.js. From 4.0.0 to 7.1.0, @hapi/inert serves static files from a directory configured with path in the directory or file handlers or relativeTo for h.file(), with confinement enforced by the confine option, but the confinement check compared the resolved…
CVE-2024-48519	Pendiente de análisis	Media (6.2)	0.11%	—	Ardupilot Rover^AI Ardupilot AP Inertialsensor Adis1647x^AI	13/5/2026	17/6/2026	Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the AP_InertialSensor_ADIS1647x.cpp, ArduRover, ADIS1647x Sensor component.
CVE-2024-49221	Modificada	Media (6.1)	0.17%	—	Julianweinert Cslider	17/10/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in julian.weinert cSlider cslider allows Cross Site Request Forgery.This issue affects cSlider: from n/a through <= 2.4.2.
CVE-2014-10068	Modificada	Alta (7.5)	1.9%	—	Hapi Inert	29/5/2018	17/6/2026	The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.
CVE-2009-4679	Modificada	Alta (7.5)	7.9%	—	Inertialfate COM IF Nexus	8/3/2010	16/6/2026	Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
CVE-2009-4057	Modificada	Alta (7.5)	1.0%	—	Inertialfate COM IF Nexus	24/11/2009	16/6/2026	SQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php.
CVE-2006-6727	Modificada	Alta (7.5)	1.3%	—	Inertianews	26/12/2006	16/6/2026	PHP remote file inclusion vulnerability in inertianews_class.php in inertianews 0.02 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.
CVE-2006-6726	Modificada	Alta (7.5)	2.5%	—	Inertianews	26/12/2006	16/6/2026	PHP remote file inclusion vulnerability in inertianews_main.php in inertianews 0.02 beta allows remote attackers to execute arbitrary PHP code via a URL in the inews_path parameter.