Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2663▼ 380 respecto a la semana anterior

Críticas / altas1289▼ 36 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2003-1237	Modificada	Media (4.3)	1.9%	—	Matt Wright Wwwboard^AI	31/12/2003	16/6/2026	Cross-site scripting vulnerability (XSS) in WWWBoard 2.0A2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via a message post.
CVE-2001-1457	Modificada	Alta (7.5)	6.3%	—	Nobreak Technologies Crazywwwboard	30/1/2002	16/6/2026	Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable.
CVE-2001-0173	Modificada	Alta (10)	6.0%	—	Nobreak Technologies Crazywwwboard Qdecoder	3/5/2001	16/6/2026	Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.
CVE-1999-0953	Modificada	Alta (10)	8.6%	—	Matt Wright Wwwboard	16/9/1999	16/6/2026	WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.
CVE-1999-0954	Modificada	Alta (7.5)	1.1%	—	Matt Wright Wwwboard	16/9/1999	16/6/2026	WWWBoard has a default username and default password.
CVE-1999-0930	Modificada	Media (5)	1.5%	—	Matt Wright Wwwboard	3/9/1998	16/6/2026	wwwboard allows a remote attacker to delete message board articles via a malformed argument.