Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2841▼ 157 respecto a la semana anterior
Críticas / altas1370▲ 51 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 258 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.76% | — | Tine20 Tine 2.0 | 17/11/2017 | 17/6/2026 | Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation | |
| Modificada | Media (5.4) | 0.93% | — | Tine20 Tine 2.0 | 30/9/2017 | 17/6/2026 | Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users. | |
| Modificada | Media (5.4) | 0.91% | — | Tine20 Tine 2.0 | 30/9/2017 | 17/6/2026 | Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users. | |
| Modificada | Media (5.4) | 0.93% | — | Tine20 Tine 2.0 | 30/9/2017 | 17/6/2026 | Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users. | |
| Modificada | Media (6.5) | 3.5% | — | Huawei ACUHuawei AR 19/29/49Huawei AR G3Huawei ATN+62 | 20/6/2013 | 16/6/2026 | The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500,… | |
| Modificada | Baja (3.5) | 2.3% | — | HP 0150a129HP 0150a12aHP 0150a12bHP 0150a12c+671 | 1/2/2013 | 16/6/2026 | Certain HP Access Controller, Fabric Module, Firewall, Router, Switch, and UTM Appliance products; certain HP 3Com Access Controller, Router, and Switch products; certain HP H3C Access Controller, Firewall, Router, Switch, and Switch and Route Processing Unit products; and certain Huawei Firewall/Gateway, Router,… | |
| Modificada | Alta (7.5) | 1.2% | — | Clone2009 Ebay Clone | 20/8/2009 | 16/6/2026 | Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to product_desc.php, and the cid parameter to (2) showcategory.php and (3) gallery.php. | |
| Modificada | Media (4.3) | 1.2% | — | Clone2009 Ebay Clone | 10/7/2009 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter. | |
| Modificada | Media (6.8) | 1.9% | — | Fujitsu Jasmine2000 | 10/3/2009 | 16/6/2026 | CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. |