Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2635▼ 214 respecto a la semana anterior
Críticas / altas1385▲ 153 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (9.8) | 0.93% | — | Xiandafu BeetlAI | 23/7/2026 | 28/7/2026 | An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism | |
| Aplazada | Media (5.5) | 0.52% | — | Xiandafu BeetlAI | 17/5/2026 | 17/6/2026 | A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFunction.java of the component SpELFunction. The manipulation leads to improper neutralization of special elements used in an… | |
| Modificada | Crítica (9.8) | 1.0% | — | Xiandafu Beetl | 2/2/2024 | 17/6/2026 | Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading to arbitrary code… | |
| Modificada | Media (6.1) | 0.43% | — | Beetl-bbs Project Beetl-bbs | 23/1/2024 | 17/6/2026 | Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter. | |
| Modificada | Media (5.4) | 0.42% | — | Beetl-bbs Project Beetl-bbs | 16/1/2024 | 17/6/2026 | A Stored Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter. | |
| Modificada | Crítica (9.8) | 0.93% | — | Beetl Project Beetl | 4/5/2023 | 17/6/2026 | An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload. | |
| Modificada | Media (5.4) | 0.40% | — | Beetl-bbs Project Beetl-bbs | 8/12/2022 | 17/6/2026 | A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the… |