Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3029▼ 65 respecto a la semana anterior
Críticas / altas1425▲ 60 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
30 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.53% | — | Cszcms CSZ CMS | 11/3/2021 | 17/6/2026 | CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name. | |
| Modificada | Media (5.4) | 0.54% | — | Cszcms CSZ CMS | 10/3/2021 | 17/6/2026 | A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter. | |
| Modificada | Crítica (9.8) | 3.1% | — | Cszcms CSZ CMS | 26/8/2019 | 17/6/2026 | CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI. | |
| Modificada | Crítica (9.8) | 32% | — | Cszcms CSZ CMS | 30/6/2019 | 17/6/2026 | core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter. | |
| Modificada | Alta (8.8) | 0.65% | — | Cszcms CSZ CMS | 7/2/2019 | 17/6/2026 | CSZ CMS 1.1.8 has CSRF via admin/users/new/add. |