Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-41450	Modificada	Alta (8.8)	1.2%	—	Phpkobo Ajaxnewsticker	28/9/2023	9/7/2026	An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
CVE-2023-41447	Modificada	Media (6.1)	0.66%	—	Phpkobo Ajaxnewsticker	28/9/2023	9/7/2026	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component.
CVE-2023-41446	Modificada	Media (6.1)	0.66%	—	Phpkobo Ajaxnewsticker	28/9/2023	9/7/2026	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component.
CVE-2023-41453	Modificada	Media (6.1)	0.66%	—	Phpkobo Ajaxnewsticker	27/9/2023	9/7/2026	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component.
CVE-2023-41452	Modificada	Alta (8.8)	0.54%	—	Phpkobo Ajaxnewsticker	27/9/2023	9/7/2026	Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
CVE-2023-41451	Modificada	Media (6.1)	0.66%	—	Phpkobo Ajaxnewsticker	27/9/2023	9/7/2026	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
CVE-2023-41449	Modificada	Crítica (9.8)	1.4%	—	Phpkobo Ajaxnewsticker	27/9/2023	9/7/2026	An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
CVE-2023-41448	Modificada	Media (6.1)	0.70%	—	Phpkobo Ajaxnewsticker	27/9/2023	9/7/2026	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component.
CVE-2023-41445	Modificada	Media (6.1)	0.61%	—	Phpkobo Ajaxnewsticker	27/9/2023	9/7/2026	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component.