Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2882▼ 181 respecto a la semana anterior

Críticas / altas1279▼ 60 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2008-6390	Modificada	Alta (7.5)	1.0%	—	Ocean12tech Membership Manager PRO	2/3/2009	16/6/2026	SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2008-6371	Modificada	Alta (7.5)	2.0%	—	Ocean12tech Membership Manager PRO	2/3/2009	16/6/2026	SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username (Username parameter).
CVE-2008-5128	Modificada	Media (5)	1.3%	—	Ocean12 Technologies Membership Manager PRO	18/11/2008	16/6/2026	Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12member.mdb.
CVE-2005-1095	Modificada	Media (4.3)	1.9%	—	Ocean12 Technologies Membership Manager PRO	2/5/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVE-2005-1096	Modificada	Alta (7.5)	1.3%	—	Ocean12 Technologies Membership Manager PRO	6/4/2005	16/6/2026	SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter.