Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 224 respecto a la semana anterior

Críticas / altas1384▲ 157 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2010-0363	Modificada	Baja (2.6)	1.2%	—	Zeus WEB Server	20/1/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2002-1785.
CVE-2010-0362	Modificada	Media (5)	1.5%	—	Zeus WEB Server	20/1/2010	16/6/2026	Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses.
CVE-2010-0359	Modificada	Alta (10)	20%	—	Zeus WEB Server	20/1/2010	16/6/2026	Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long string in an invalid Client Hello message.
CVE-2002-1785	Modificada	Baja (1.9)	2.8%	—	Zeus Technologies Zeus WEB Server	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.
CVE-2000-0149	Modificada	Media (5)	7.4%	—	Zeus Technologies Zeus WEB Server	8/2/2000	16/6/2026	Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
CVE-1999-0884	Modificada	Media (5)	0.78%	—	Zeus Technologies Zeus WEB Server	25/10/1999	16/6/2026	The Zeus web server administrative interface uses weak encryption for its passwords.
CVE-1999-0883	Modificada	Alta (10)	2.6%	—	Zeus Technologies Zeus WEB Server	25/10/1999	16/6/2026	Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.