Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior
Críticas / altas1284▼ 85 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.4) | 1.0% | — | Gleezcms Gleez CMS | 3/4/2024 | 17/6/2026 | Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php. | |
| Modificada | Media (5.3) | 1.5% | — | Gleeztech Gleez CMS | 7/9/2018 | 17/6/2026 | A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote attacker to perform multiple user enumerations, which can further help an attacker to perform login attempts in excess of the configured login attempt limit. The vulnerability is due to insufficient server-side access control and… | |
| Modificada | Media (6.1) | 0.79% | — | Gleezcms Gleez CMS | 2/9/2018 | 17/6/2026 | An issue was discovered in Gleez CMS v1.2.0. There is XSS via media/imagecache/resize. | |
| Modificada | Alta (8.8) | 2.4% | — | Gleezcms Gleez CMS | 25/8/2018 | 17/6/2026 | There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add. | |
| Modificada | Alta (8.8) | 0.65% | — | Gleeztech Gleez CMS | 5/7/2018 | 17/6/2026 | Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request. | |
| Modificada | Media (5.4) | 0.95% | — | Gleezcms Gleez CMS | 5/4/2018 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to edit the same content, as demonstrated by use of the source editor for HTML mode in an Add Blog… |