Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2517▼ 423 respecto a la semana anterior

Críticas / altas1296▲ 12 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)57▼ 471 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2002-2444	Modificada	Crítica (9.8)	1.6%	—	Snoopy Project Snoopy	28/10/2019	16/6/2026	Snoopy before 2.0.0 has a security hole in exec cURL
CVE-2014-5009	Modificada	Crítica (9.8)	4.7%	—	Snoopy Redhat Openstack Nagios	31/3/2017	17/6/2026	Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008.
CVE-2014-5008	Modificada	Crítica (9.8)	4.1%	—	Snoopy Redhat Openstack Debian Linux	31/3/2017	17/6/2026	Snoopy allows remote attackers to execute arbitrary commands.
CVE-2008-7313	Modificada	Crítica (9.8)	4.5%	—	Snoopy Redhat Openstack Nagios	31/3/2017	16/6/2026	The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.
CVE-2009-0502	Modificada	Media (4.3)	1.3%	—	Snoopy Moodle	10/2/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4, allows remote attackers to inject arbitrary web script or HTML via an HTML block, which is not properly handled when the "Login as"…
CVE-2008-4796	Modificada	Alta (10)	9.0%	—	Snoopy Project Snoopy Debian Linux Nagios Wordpress	30/10/2008	16/6/2026	The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.
CVE-2007-4466	Modificada	Media (6.8)	31%	—	Electronic Arts Snoopyctrl	9/10/2007	16/6/2026	Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbitrary code via unspecified methods and parameters.
CVE-2005-3330	Modificada	Alta (7.5)	17%	—	Snoopy	27/10/2005	16/6/2026	The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.