Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
30 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.8% | — | Acymailing | 30/3/2023 | 17/6/2026 | AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to unrestricted file upload allowing PHP code to be injected. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0. | |
| Modificada | Media (6.1) | 1.9% | 💥 Exploit | Acymailing | 17/5/2021 | 17/6/2026 | When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim. | |
| Modificada | Alta (7.2) | 1.3% | — | Acyba Acymailing | 24/3/2020 | 17/6/2026 | Acyba AcyMailing before 6.9.2 mishandles file uploads by admins. | |
| Modificada | Alta (7.2) | 0.98% | — | Acyba Acymailing | 9/3/2020 | 17/6/2026 | SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php. | |
| Modificada | Alta (8.8) | 7.0% | 💥 Exploit | Acyba Acymailing | 28/3/2018 | 17/6/2026 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export. |