Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 214 respecto a la semana anterior

Críticas / altas1385▲ 153 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-62077	Aplazada	Media (5.9)	0.29%	—	Seoseon Europe S.L Affiliate Link Tracker^AI	22/1/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SEOSEON EUROPE S.L Affiliate Link Tracker affiliate-link-tracker allows Stored XSS.This issue affects Affiliate Link Tracker: from n/a through <= 0.2.
CVE-2023-3935	Modificada	Crítica (9.8)	2.0%	—	Wibu Codemeter Runtime Trumpf Oseon Trumpf Programmingtube Trumpf Teczonebend+20	13/9/2023	17/6/2026	A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.
CVE-2022-2052	Modificada	Crítica (9.8)	0.68%	—	Trumpf JOB Order Interface Trumpf Oseon Trumpf Trutops Boost Trumpf Trutops FAB+1	17/10/2022	17/6/2026	Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.
CVE-2009-4581	Modificada	Crítica (9.8)	5.2%	—	Roseonlinecms	6/1/2010	16/6/2026	Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the admin parameter.
CVE-2007-1636	Modificada	Alta (7.5)	2.9%	—	Roseonlinecms	23/3/2007	16/6/2026	Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the op parameter, as demonstrated by injecting PHP code into Apache log files via the URL and User-Agent HTTP header.