Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2676▼ 422 respecto a la semana anterior
Críticas / altas1295▼ 73 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior
186 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.6% | — | Zcms Project Zcms | 26/4/2022 | 17/6/2026 | ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config. | |
| Modificada | Crítica (9.8) | 1.1% | — | Cszcms CSZ CMS | 12/4/2022 | 17/6/2026 | CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus | |
| Modificada | Crítica (9.8) | 1.1% | — | Cszcms CSZ CMS | 12/4/2022 | 17/6/2026 | CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers | |
| Modificada | Crítica (9.8) | 1.2% | — | Cszcms CSZ CMS | 12/4/2022 | 17/6/2026 | CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser | |
| Modificada | Crítica (9.8) | 1.1% | — | Cszcms CSZ CMS | 12/4/2022 | 17/6/2026 | CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser | |
| Modificada | Crítica (9.8) | 1.3% | — | Cszcms CSZ CMS | 12/4/2022 | 17/6/2026 | Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers | |
| Modificada | Crítica (9.1) | 1.1% | — | Zbzcms | 10/4/2022 | 17/6/2026 | zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php. | |
| Modificada | Crítica (9.8) | 1.6% | — | Zbzcms | 10/4/2022 | 17/6/2026 | An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file. | |
| Modificada | Crítica (9.8) | 1.6% | — | Zbzcms | 10/4/2022 | 17/6/2026 | An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file. | |
| Modificada | Crítica (9.8) | 1.2% | — | Zbzcms | 10/4/2022 | 17/6/2026 | An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts. | |
| Modificada | Media (6.5) | 0.70% | — | Zbzcms | 10/4/2022 | 17/6/2026 | zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php. | |
| Modificada | Crítica (9.8) | 1.0% | — | Zbzcms | 10/4/2022 | 17/6/2026 | zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php. | |
| Modificada | Media (6.1) | 0.61% | — | Zbzcms | 10/4/2022 | 17/6/2026 | zbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the neirong parameter at /php/ajax.php. | |
| Modificada | Media (4.8) | 0.49% | — | Zzcms | 8/4/2022 | 17/6/2026 | An issue was discovered in ZZCMS 2021. There is a cross-site scripting (XSS) vulnerability in ad_manage.php. | |
| Modificada | Alta (7.2) | 1.0% | — | Zzcms | 8/4/2022 | 17/6/2026 | An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in ad_manage.php. | |
| Modificada | Media (6.5) | 3.3% | — | Cszcms CSZ CMS | 29/3/2022 | 17/6/2026 | CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/article_db, via the fieldS[] and orderby parameters. | |
| Modificada | Crítica (9.8) | 57% | — | Zzzcms Zzzphp | 23/3/2022 | 17/6/2026 | ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via danger_key() at zzz_template.php. | |
| Modificada | Alta (7.5) | 1.2% | — | Zzcms | 14/2/2022 | 17/6/2026 | An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password. | |
| Modificada | Media (5.3) | 1.7% | — | Zzcms | 9/2/2022 | 17/6/2026 | Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php. | |
| Modificada | Crítica (9.8) | 0.96% | — | Cskaza Cszcms | 27/1/2022 | 17/6/2026 | There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser | |
| Modificada | Crítica (9.8) | 0.96% | — | Zzcms | 15/12/2021 | 17/6/2026 | A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php. | |
| Modificada | Media (6.1) | 0.94% | — | Zzcms | 13/12/2021 | 17/6/2026 | Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php. | |
| Modificada | Media (5.4) | 0.58% | — | Zzzcms | 9/12/2021 | 17/6/2026 | A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php. | |
| Modificada | Alta (8.8) | 0.54% | — | Zzzcms | 9/12/2021 | 17/6/2026 | A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php. | |
| Modificada | Crítica (9.8) | 1.9% | — | Zzcms | 9/12/2021 | 17/6/2026 | An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console. |