Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2721▲ 17 respecto a la semana anterior
Críticas / altas1459▲ 351 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)72▼ 458 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.3% | — | Articlecms Project Articlecms | 13/5/2021 | 17/6/2026 | A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell. | |
| Modificada | Crítica (9.8) | 1.3% | — | Articlecms Project Articlecms | 13/5/2021 | 17/6/2026 | File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after the JPEG data, which could let a remote malicious user execute arbitrary PHP code. | |
| Modificada | Media (6.1) | 0.64% | — | Articlecms Project Articlecms | 23/11/2018 | 17/6/2026 | ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter. | |
| Modificada | Media (5.4) | 0.48% | — | Articlecms Project Articlecms | 13/6/2018 | 17/6/2026 | ArticleCMS through 2017-02-19 has XSS via an "add an article" action. |