Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▲ 14 respecto a la semana anterior

Críticas / altas1459▲ 324 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2016-10999	Modificada	Media (6.1)	0.94%	—	Momizat Goodnews	20/9/2019	17/6/2026	The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter.
CVE-2008-5820	Modificada	Alta (7.5)	1.0%	—	Edreamers Ednews	2/1/2009	16/6/2026	SQL injection vulnerability in eDNews_view.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
CVE-2008-5819	Modificada	Media (6.8)	1.9%	—	Edreamers Ednews	2/1/2009	16/6/2026	Directory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lg parameter. NOTE: some of these details are obtained from third party information.
CVE-2007-5370	Modificada	Media (4.3)	1.8%	—	Netwin Dnewsweb	11/10/2007	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb (DNews News Server) 57e1 allow remote attackers to inject arbitrary web script or HTML via the (1) group or (2) utag parameter.
CVE-2003-0495	Modificada	Media (4.3)	3.8%	—	Ledscripts.com Lednews	7/8/2003	16/6/2026	Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item.
CVE-2000-0423	Modificada	Media (5)	7.8%	—	Netwin Dnews	5/5/2000	16/6/2026	Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.