Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 237 respecto a la semana anterior

Críticas / altas1384▲ 151 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

32 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2015-8866	Modificada	Crítica (9.6)	4.2%	—	PHP Canonical Ubuntu Linux Opensuse Leap Opensuse+2	22/5/2016	17/6/2026	ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related…
CVE-2012-0007	Modificada	Media (4.3)	19%	—	Microsoft Anti-cross Site Scripting Library	10/1/2012	16/6/2026	The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability."
CVE-2010-1094	Modificada	Alta (7.5)	1.0%	—	Miethner-scripting DZ Erotik Auktionshaus V4rgo	24/3/2010	16/6/2026	SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2007-4487	Modificada	Media (4.3)	1.1%	—	Dscripting.com D22-shoutbox	22/8/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in D22-Shoutbox for Invision Power Board (IPB or IP.Board) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2002-1926	Modificada	Media (5)	1.7%	—	Aquonics Scripting Aquonics File Manager	31/12/2002	16/6/2026	Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string.
CVE-2002-1815	Modificada	Media (5)	1.7%	—	Aquonics Scripting Aquonics File Manager	31/12/2002	16/6/2026	Directory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVE-2002-1927	Modificada	Baja (2.1)	0.30%	—	Aquonics Scripting Aquonics File Manager	31/12/2002	16/6/2026	Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file.