Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2737▼ 486 respecto a la semana anterior

Críticas / altas1302▼ 188 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

166 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-18724	Modificada	Media (4.8)	0.56%	—	Yunucms	29/10/2018	17/6/2026	An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5.
CVE-2018-18723	Modificada	Media (4.8)	0.56%	—	Yunucms	29/10/2018	17/6/2026	An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5.
CVE-2018-18722	Modificada	Media (4.8)	0.56%	—	Yunucms	29/10/2018	17/6/2026	An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5.
CVE-2018-18721	Modificada	Media (4.8)	0.56%	—	Yunucms	29/10/2018	17/6/2026	An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5.
CVE-2018-18720	Modificada	Media (4.8)	0.56%	—	Yunucms	29/10/2018	17/6/2026	An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5.
CVE-2018-17322	Modificada	Media (6.1)	0.76%	—	Yunucms	22/9/2018	17/6/2026	Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter.
CVE-2018-17320	Modificada	Media (6.1)	0.66%	—	Ucms Project Ucms	21/9/2018	17/6/2026	An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadmin_aaddpost action.
CVE-2018-17037	Modificada	Alta (8.8)	0.96%	—	Ucms Project Ucms	14/9/2018	17/6/2026	user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3.
CVE-2018-17036	Modificada	Crítica (9.8)	1.7%	—	Ucms Project Ucms	14/9/2018	17/6/2026	An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.
CVE-2018-17035	Modificada	Crítica (9.8)	1.1%	—	Ucms Project Ucms	14/9/2018	17/6/2026	UCMS 1.4.6 has SQL injection during installation via the install/index.php mysql_dbname parameter.
CVE-2018-17034	Modificada	Media (6.1)	0.68%	—	Ucms Project Ucms	14/9/2018	17/6/2026	UCMS 1.4.6 has XSS via the install/index.php mysql_dbname parameter.
CVE-2018-16653	Modificada	Media (6.1)	0.71%	—	Rejucms Project Rejucms	7/9/2018	17/6/2026	rejucms 2.1 has XSS via the ucenter/cms_user_add.php u_name parameter.
CVE-2018-14838	Modificada	Media (6.1)	0.71%	—	Rejucms Project Rejucms	2/8/2018	17/6/2026	rejucms 2.1 has stored XSS via the admin/book.php content parameter.
CVE-2018-9993	Modificada	Media (4.8)	0.52%	—	Yunucms	10/4/2018	17/6/2026	YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/## page (aka a news center page).
CVE-2008-2891	Modificada	Alta (7.5)	0.97%	💥 Exploit	Emusoft Emucms	27/6/2008	16/6/2026	SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a category action.
CVE-2006-4822	Modificada	Media (4.3)	2.0%	—	Emusoft Emucms	15/9/2006	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page parameters.