Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2564▼ 301 respecto a la semana anterior

Críticas / altas1351▲ 99 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-1795	Modificada	Alta (7.5)	4.2%	—	Webglimpse	20/3/2012	16/6/2026	webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.
CVE-2012-1787	Modificada	Media (4.3)	1.8%	—	Webglimpse	19/3/2012	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DOMAIN parameters.
CVE-2009-5114	Modificada	Media (5)	13%	—	Iwork Webglimpse	19/3/2012	16/6/2026	Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the DOC parameter.
CVE-2009-5113	Modificada	Media (4.3)	0.95%	—	Iwork Webglimpse	19/3/2012	16/6/2026	Cross-site scripting (XSS) vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter.
CVE-2009-5112	Modificada	Media (5)	5.3%	—	Iwork Webglimpse	19/3/2012	16/6/2026	wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request.
CVE-2005-4354	Modificada	Media (4.3)	0.96%	—	Webglimpse^AI	20/12/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter.
CVE-2005-4328	Modificada	Media (4.3)	1.8%	—	University OF Arizona Webglimpse	17/12/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
CVE-1999-0147	Modificada	Alta (7.5)	8.7%	—	University OF Arizona Glimpse Http University OF Arizona Webglimpse	1/7/1997	16/6/2026	The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.