Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2757▲ 47 respecto a la semana anterior

Críticas / altas1482▲ 372 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2007-6530	Modificada	Alta (9.3)	37%	—	Groove Virtual Office HP Loadrunner Persits Xupload	27/12/2007	16/6/2026	Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function.
CVE-2006-3842	Modificada	Media (4.3)	1.2%	—	Adventnet Zoho Virtual Office	25/7/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in Zoho Virtual Office 3.2 Build 3210 allows remote attackers to execute arbitrary web script or HTML via an HTML message.
CVE-2005-1678	Modificada	Baja (2.6)	1.6%	—	Groove Workspace Groove Virtual Office	20/5/2005	16/6/2026	Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code.
CVE-2005-1677	Modificada	Alta (7.5)	3.6%	—	Groove Workspace Groove Virtual Office	20/5/2005	16/6/2026	Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass restrictions on COM objects.
CVE-2005-1676	Modificada	Media (6.8)	3.0%	—	Groove Workspace Groove Virtual Office	20/5/2005	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists…
CVE-2005-1675	Modificada	Media (4.6)	0.97%	—	Groove Workspace Groove Virtual Office	20/5/2005	16/6/2026	Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure EVERYBODY permissions, which allows local users to gain sensitive information.