Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior

Críticas / altas1403▲ 41 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

85 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-9237	Modificada	Media (5.4)	1.8%	—	Iscripts Easycreate	4/4/2018	17/6/2026	iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.
CVE-2018-9236	Modificada	Media (5.4)	1.8%	—	Iscripts Easycreate	4/4/2018	17/6/2026	iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field.
CVE-2014-5635	Modificada	Media (5.4)	0.27%	—	Createdineden BUY Yorkshire Conference	9/9/2014	17/6/2026	The Buy Yorkshire Conference (aka com.gotfocus.buyyorkshire) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2012-1247	Modificada	Baja (2.6)	1.8%	—	Webcreate WEB Mart	15/5/2012	16/6/2026	Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML by leveraging support for Cascading Style Sheets (CSS) expressions.
CVE-2012-1246	Modificada	Media (4.3)	1.8%	—	Webcreate WEB Mart	15/5/2012	16/6/2026	Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie.
CVE-2012-1778	Modificada	Alta (7.5)	1.0%	—	Createvision CMS	19/3/2012	16/6/2026	SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-2015	Modificada	Media (6.8)	0.90%	—	Createch-group Lisk CMS	24/5/2010	16/6/2026	Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a view_inbox action to cp/cp_messages.php or (2) the id parameter to cp/edit_email.php.
CVE-2010-2014	Modificada	Media (4.3)	0.87%	—	Createch-group Lisk CMS	24/5/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in cp/list_content.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the cl or possibly id parameter.
CVE-2010-2013	Modificada	Media (4.3)	1.1%	—	Createch-group Lisk CMS	24/5/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVE-2007-0112	Modificada	Alta (7.5)	1.1%	—	Createauction	9/1/2007	16/6/2026	SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via the catid parameter.