Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2769▲ 8 respecto a la semana anterior

Críticas / altas1461▲ 292 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)93▼ 416 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2003-1543	Modificada	Media (4.3)	2.0%	—	Bajie Java Http Server	31/12/2003	16/6/2026	Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.
CVE-2003-1511	Modificada	Media (4.3)	3.6%	—	Bajie Java Http Server	31/12/2003	16/6/2026	Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.
CVE-2001-0307	Modificada	Alta (7.5)	7.9%	—	Bajie Java Http Server	3/5/2001	16/6/2026	Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist.
CVE-2001-0308	Modificada	Alta (7.5)	3.7%	—	Bajie Java Http Server	3/5/2001	16/6/2026	UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program.
CVE-2000-0774	Modificada	Media (5)	1.5%	—	Bajie Java Http Server	20/10/2000	16/6/2026	The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
CVE-2000-0773	Modificada	Media (5)	1.9%	—	Bajie Java Http Server	20/10/2000	16/6/2026	Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack.