Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior
Críticas / altas1264▼ 228 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior
111 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.78% | — | Jeecg Boot | 25/11/2022 | 9/7/2026 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check. | |
| Modificada | Media (5.3) | 0.63% | — | Jeecg Boot | 25/11/2022 | 9/7/2026 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. | |
| Modificada | Crítica (9.8) | 0.80% | — | Jeecg Boot | 4/8/2022 | 17/6/2026 | A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205594 is the… | |
| Modificada | Media (6.1) | 0.91% | — | Jeecg Boot | 10/3/2022 | 17/6/2026 | A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event. | |
| Modificada | Crítica (9.8) | 1.4% | — | Jeecg Boot | 16/2/2022 | 17/6/2026 | Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData. | |
| Modificada | Crítica (9.8) | 1.4% | — | Jeecg Boot | 16/2/2022 | 17/6/2026 | Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId. | |
| Modificada | Crítica (9.8) | 2.0% | — | Jeecg Boot | 25/1/2022 | 17/6/2026 | In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges. | |
| Modificada | Alta (7.5) | 1.3% | — | Jeecg | 27/12/2021 | 17/6/2026 | An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable. | |
| Modificada | Crítica (9.8) | 2.3% | — | Jeecg Boot | 6/8/2021 | 17/6/2026 | An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code. | |
| Modificada | Alta (7.5) | 1.6% | — | Jeecg Boot | 6/8/2021 | 17/6/2026 | A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information. | |
| Modificada | Crítica (9.8) | 3.7% | — | Guojusoft Jeecg | 3/5/2021 | 17/6/2026 | Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload". |