Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2568▼ 331 respecto a la semana anterior

Críticas / altas1352▲ 94 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2007-4182	Modificada	Alta (7.5)	1.4%	—	Wikiwebweaver	8/8/2007	16/6/2026	Unrestricted file upload vulnerability in index.php in WikiWebWeaver 1.1 and earlier allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .gif.php, which is accessible from data/documents/.
CVE-2004-2128	Modificada	Media (6.8)	2.3%	—	BRS Webweaver^AI	31/12/2004	16/6/2026	Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the query string to ISAPISkeleton.dll.
CVE-2003-1235	Modificada	Media (5)	2.3%	—	BRS Webweaver^AI	31/12/2003	16/6/2026	BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.
CVE-2003-1165	Modificada	Media (5)	5.6%	—	BRS Webweaver	31/12/2003	16/6/2026	Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header.
CVE-2003-0409	Modificada	Alta (10)	8.0%	—	BRS Webweaver	30/6/2003	16/6/2026	Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP (1) POST or (2) HEAD request.
CVE-2002-1546	Modificada	Alta (7.5)	1.8%	—	BRS Webweaver	31/3/2003	16/6/2026	BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.
CVE-2001-0453	Modificada	Media (5)	1.9%	—	BRS Webweaver	27/6/2001	16/6/2026	Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories.
CVE-2001-0452	Modificada	Media (5)	3.3%	—	BRS Webweaver	27/6/2001	16/6/2026	BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.