Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 224 respecto a la semana anterior

Críticas / altas1384▲ 157 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-48116	Modificada	Alta (7.2)	1.4%	—	Ayacms Project Ayacms	27/1/2023	17/6/2026	AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php.
CVE-2022-47926	Modificada	Crítica (9.8)	0.80%	—	Ayacms Project Ayacms	22/12/2022	17/6/2026	AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php
CVE-2022-46102	Modificada	Crítica (9.8)	0.74%	—	Ayacms Project Ayacms	22/12/2022	17/6/2026	AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php
CVE-2022-46101	Modificada	Alta (8.8)	1.1%	—	Ayacms Project Ayacms	22/12/2022	17/6/2026	AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command execution by inserting malicious code.
CVE-2022-45550	Modificada	Crítica (9.8)	1.5%	—	Ayacms Project Ayacms	7/12/2022	17/6/2026	AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE).
CVE-2022-45548	Modificada	Alta (8.8)	0.79%	—	Ayacms Project Ayacms	6/12/2022	17/6/2026	AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability.
CVE-2022-43074	Modificada	Crítica (9.8)	0.99%	—	Ayacms Project Ayacms	10/11/2022	17/6/2026	AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2021-44238	Modificada	Alta (7.2)	1.9%	—	Ayacms Project Ayacms	1/3/2022	17/6/2026	AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,
CVE-2020-23686	Modificada	Alta (8.8)	0.59%	—	Ayacms Project Ayacms	2/11/2021	17/6/2026	Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts.