Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
57 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.80% | — | Jeecg Boot | 4/8/2022 | 17/6/2026 | A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205594 is the… | |
| Modificada | Media (6.1) | 0.91% | — | Jeecg Boot | 10/3/2022 | 17/6/2026 | A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event. | |
| Modificada | Crítica (9.8) | 1.4% | — | Jeecg Boot | 16/2/2022 | 17/6/2026 | Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData. | |
| Modificada | Crítica (9.8) | 1.4% | — | Jeecg Boot | 16/2/2022 | 17/6/2026 | Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId. | |
| Modificada | Crítica (9.8) | 2.0% | — | Jeecg Boot | 25/1/2022 | 17/6/2026 | In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges. | |
| Modificada | Crítica (9.8) | 2.3% | — | Jeecg Boot | 6/8/2021 | 17/6/2026 | An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code. | |
| Modificada | Alta (7.5) | 1.6% | — | Jeecg Boot | 6/8/2021 | 17/6/2026 | A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information. |