Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior
Críticas / altas1270▼ 74 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.8) | 0.54% | — | Easyimages2.0 Project Easyimages2.0 | 11/12/2025 | 17/6/2026 | An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format. | |
| Analizada | Crítica (9.1) | 0.57% | — | Easyimages2.0 Project Easyimages2.0 | 11/12/2025 | 17/6/2026 | An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name. | |
| Analizada | Alta (8.8) | 0.21% | — | Easyimages2.0 Project Easyimages2.0 | 11/12/2025 | 17/6/2026 | A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page. | |
| Modificada | Alta (8.8) | 0.53% | — | Easyimages2.0 Project Easyimages2.0 | 11/12/2025 | 17/6/2026 | An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading a crafted PHP file. | |
| Analizada | Media (5.1) | 0.23% | — | Easyimages2.0 Project Easyimages2.0 | 19/11/2025 | 17/6/2026 | A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely. | |
| Modificada | Media (5.3) | 0.66% | — | Easyimages2.0 Project Easyimages2.0 | 25/12/2023 | 17/6/2026 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vulnerability affects unknown code of the file app/hide.php. The manipulation of the argument key leads to path traversal: '../filedir'. The attack can be initiated remotely. The complexity of an attack… | |
| Modificada | Media (6.1) | 0.43% | — | Easyimages2.0 Project Easyimages2.0 | 23/5/2023 | 17/6/2026 | EasyImages2.0 ≤ 2.8.1 is vulnerable to Cross Site Scripting (XSS) via viewlog.php. | |
| Modificada | Media (5.4) | 0.43% | — | Easyimages2.0 Project Easyimages2.0 | 5/3/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7. |