Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior
Críticas / altas1381▼ 36 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior
118 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 1.6% | 💥 PoC | Jflyfox Jfinal CMS | 15/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection. | |
| Modificada | Alta (8.8) | 1.6% | 💥 PoC | Jflyfox Jfinal CMS | 15/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list. | |
| Modificada | Alta (7.2) | 1.2% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list. | |
| Modificada | Alta (7.2) | 1.2% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve. | |
| Modificada | Alta (7.2) | 1.1% | — | Jflyfox Jfinal CMS | 9/9/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list. | |
| Modificada | Media (5.4) | 0.49% | — | Jflyfox Jfinal CMS | 25/8/2022 | 17/6/2026 | Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module. | |
| Modificada | Crítica (9.8) | 0.90% | — | Jflyfox Jfinal CMS | 23/8/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list. | |
| Modificada | Crítica (9.8) | 0.90% | — | Jflyfox Jfinal CMS | 23/8/2022 | 17/6/2026 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list. | |
| Modificada | Alta (8.8) | 0.90% | — | Jflyfox Jfinal CMS | 3/8/2022 | 17/6/2026 | JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user. | |
| Modificada | Alta (7.2) | 0.98% | — | Jflyfox Jfinal CMS | 23/6/2022 | 17/6/2026 | Jfinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via the attrVal parameter at /jfinal_cms/system/dict/list. | |
| Modificada | Media (5.4) | 0.51% | — | Jflyfox Jfinal CMS | 23/6/2022 | 17/6/2026 | Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module. | |
| Modificada | Media (5.4) | 0.51% | — | Jflyfox Jfinal CMS | 2/6/2022 | 17/6/2026 | A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request. | |
| Modificada | Crítica (9.8) | 1.1% | — | Jflyfox Jfinal CMS | 26/5/2022 | 17/6/2026 | Jfinal cms 5.1.0 is vulnerable to SQL Injection. |