Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2008-3367	Modificada	Media (4.3)	1.3%	—	Webwizguide WEB WIZ Rich Text Editor	30/7/2008	16/6/2026	Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter.
CVE-2008-0466	Modificada	Media (5)	4.9%	💥 Exploit	Webwiz WEB WIZ Forums Webwiz WEB WIZ Newspad Webwiz WEB WIZ Rich Text Editor	29/1/2008	16/6/2026	Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a…
CVE-2007-3202	Modificada	Media (4.3)	1.0%	—	Bruce Corkhill WEB WIZ Rich Text Editor	12/6/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document.