Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior
Críticas / altas1458▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
185 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.72% | — | Publiccms | 12/7/2024 | 17/6/2026 | PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability via the cmdarray parameter at /site/ScriptComponent.java. | |
| Modificada | Alta (8.8) | 0.42% | — | Publiccms | 12/7/2024 | 17/6/2026 | An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. | |
| Modificada | Alta (8.8) | 0.99% | — | Publiccms | 12/7/2024 | 17/6/2026 | An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. | |
| Modificada | Alta (8.8) | 0.67% | — | Publiccms | 12/7/2024 | 17/6/2026 | An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. | |
| Modificada | Alta (8.8) | 0.67% | — | Publiccms | 12/7/2024 | 17/6/2026 | An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. | |
| Modificada | Media (6.5) | 0.33% | — | Publiccms | 12/7/2024 | 17/6/2026 | PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace. | |
| Modificada | Alta (8.8) | 0.72% | — | Publiccms | 12/7/2024 | 17/6/2026 | An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. | |
| Modificada | Alta (8.8) | 0.66% | — | Publiccms | 12/7/2024 | 17/6/2026 | An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. | |
| Modificada | Alta (8.8) | 0.46% | — | Publiccms | 12/7/2024 | 17/6/2026 | PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/#maintenance_sysTask/edit. | |
| Modificada | Alta (8.8) | 0.30% | — | Publiccms | 12/7/2024 | 17/6/2026 | PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/ueditor?action=catchimage. | |
| Analizada | Media (6.1) | 0.36% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.' | |
| Modificada | Alta (8.8) | 0.22% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord | |
| Analizada | Alta (8.8) | 0.30% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup | |
| Modificada | Alta (8.8) | 0.29% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3 | |
| Analizada | Alta (8.8) | 0.60% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2 | |
| Analizada | Alta (8.8) | 0.29% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup | |
| Analizada | Media (6.3) | 0.19% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6 | |
| Modificada | Alta (8.8) | 0.29% | — | Idccms Project Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=del | |
| Analizada | Media (5.3) | 0.17% | — | Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=rev | |
| Modificada | Alta (8.8) | 0.29% | — | Idccms Project Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=del | |
| Analizada | Alta (8.8) | 0.60% | — | Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close | |
| Analizada | Media (5.9) | 0.17% | — | Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=add. | |
| Modificada | Alta (8.8) | 0.29% | — | Idccms Project Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=del | |
| Analizada | Alta (8.8) | 0.30% | — | Idccms | 5/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close | |
| Analizada | Alta (8.8) | 0.30% | — | Idccms | 5/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal |