Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2628▼ 312 respecto a la semana anterior

Críticas / altas1351▲ 89 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-39613	Aplazada	Alta (7.5)	0.51%	—	Kutethemes Boutique^AI	8/4/2026	24/7/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through <= 2.3.3.
CVE-2026-25342	Aplazada	Alta (7.1)	0.18%	—	Kutethemes Boutique^AI	25/3/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Boutique: from n/a through < 2.4.6.
CVE-2021-30048	Modificada	Media (5.3)	2.1%	—	Novel Boutique House-plus Project Novel Boutique House-plus	29/4/2021	17/6/2026	Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说精品屋-plus) 3.5.1 allows attackers to read arbitrary files via the filePath parameter.
CVE-2010-5020	Modificada	Alta (7.5)	0.98%	—	Netartmedia Iboutique	2/11/2011	16/6/2026	SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVE-2010-3466	Modificada	Media (4.3)	1.0%	—	Netartmedia Iboutique.mall	17/9/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in the hosted_signup module in NetArt Media iBoutique.MALL 1.2 allows remote attackers to inject arbitrary web script or HTML via the tmpl parameter. NOTE: some of these details are obtained from third party information.
CVE-2010-0804	Modificada	Media (4.3)	1.5%	—	Netartmedia Iboutique	2/3/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter in a products action.
CVE-2008-4354	Modificada	Alta (7.5)	1.00%	—	NET ART Media Iboutique	30/9/2008	16/6/2026	SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php.
CVE-2006-2791	Modificada	Media (5)	1.7%	—	NET ART Media Iboutique.mall	3/6/2006	16/6/2026	Directory traversal vulnerability in index.php in iBoutique.MALL and possibly iBoutique allows remote attackers to read arbitrary files via ".." sequences in the function parameter.