Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2577▼ 311 respecto a la semana anterior

Críticas / altas1352▲ 96 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-16647	Modificada	Alta (7.2)	2.0%	—	Maxthon Browser	29/10/2019	17/6/2026	Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows.
CVE-2010-5246	Modificada	Media (6.9)	0.42%	—	Maxthon Browser	7/9/2012	16/6/2026	Multiple untrusted search path vulnerabilities in Maxthon Browser 1.6.7.35 and 2.5.15 allow local users to gain privileges via a Trojan horse (1) RSRC32.dll or (2) dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .html file. NOTE: the provenance of this information is…
CVE-2009-3018	Modificada	Media (4.3)	1.1%	—	Maxthon Browser	31/8/2009	16/6/2026	Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a…
CVE-2009-3006	Modificada	Media (4.3)	1.0%	—	Maxthon Browser	28/8/2009	16/6/2026	Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.
CVE-2008-3667	Modificada	Media (6.8)	6.9%	—	Maxthon Browser	13/8/2008	16/6/2026	Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header.