Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior

Críticas / altas1313▼ 190 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-22858	Modificada	Alta (8.8)	1.2%	—	Changjia Property Management System Project Changjia Property Management System	17/2/2021	17/6/2026	Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions.
CVE-2021-22857	Modificada	Alta (7.5)	1.8%	—	Changjia Property Management System Project Changjia Property Management System	17/2/2021	17/6/2026	The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily.
CVE-2021-22856	Modificada	Alta (7.5)	1.5%	—	Changjia Property Management System Project Changjia Property Management System	17/2/2021	17/6/2026	The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.