Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-102796	Pendiente de análisis	Alta (7.5)	0.25%	—	Wikimedia Userpageviewtracker^AI	29/9/2026	1/10/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from * before 1.46.1, 1.45.5, 1.43.10.
CVE-2024-2412	Aplazada	Media (5.3)	0.43%	—	Heimavista Rpage^AI Heimavista Epage^AI	13/3/2024	17/6/2026	The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user registration on sites where user registration is supposed to be disabled.
CVE-2022-39053	Modificada	Media (6.1)	0.61%	—	Heimavista Dark Horse Rpage	28/9/2022	17/6/2026	Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
CVE-2008-2575	Modificada	Media (6.8)	2.6%	—	Jcoppens Cbrpager Fedoraproject Fedora	6/6/2008	16/6/2026	cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.
CVE-2007-1077	Modificada	Alta (7.5)	0.97%	—	Design4online Userpages2	22/2/2007	16/6/2026	SQL injection vulnerability in page.asp in Design4Online UserPages2 2.0 allows remote attackers to execute arbitrary SQL commands via the art_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2000-0101	Modificada	Alta (7.5)	2.1%	—	Make-a-store Orderpage	1/2/2000	16/6/2026	The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.