Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2558▼ 318 respecto a la semana anterior
Críticas / altas1344▲ 80 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
60 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.1) | 0.25% | — | IdccmsAI | 21/9/2026 | 22/9/2026 | idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.php. | |
| Analizada | Media (5.3) | 0.91% | — | Idccms | 21/11/2024 | 17/6/2026 | A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the… | |
| Analizada | Media (6.1) | 0.36% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.' | |
| Modificada | Alta (8.8) | 0.22% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord | |
| Analizada | Alta (8.8) | 0.30% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup | |
| Modificada | Alta (8.8) | 0.29% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3 | |
| Analizada | Alta (8.8) | 0.60% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2 | |
| Analizada | Alta (8.8) | 0.29% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup | |
| Analizada | Media (6.3) | 0.19% | — | Idccms | 10/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6 | |
| Modificada | Alta (8.8) | 0.29% | — | Idccms Project Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=del | |
| Analizada | Media (5.3) | 0.17% | — | Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=rev | |
| Modificada | Alta (8.8) | 0.29% | — | Idccms Project Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=del | |
| Analizada | Alta (8.8) | 0.60% | — | Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close | |
| Analizada | Media (5.9) | 0.17% | — | Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=add. | |
| Modificada | Alta (8.8) | 0.29% | — | Idccms Project Idccms | 9/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=del | |
| Analizada | Alta (8.8) | 0.30% | — | Idccms | 5/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close | |
| Analizada | Alta (8.8) | 0.30% | — | Idccms | 5/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal | |
| Analizada | Media (5.4) | 0.18% | — | Idccms | 5/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData_deal.php?mudi=del | |
| Analizada | Media (6.3) | 0.19% | — | Idccms | 5/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php?mudi=rev&nohrefStr=close | |
| Analizada | Media (5.4) | 0.19% | — | Idccms | 5/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData_deal.php?mudi=del | |
| Analizada | Media (5.4) | 0.20% | — | Idccms | 2/7/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&nohrefStr=close. | |
| Analizada | Alta (8.8) | 0.30% | — | Idccms | 27/6/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet. | |
| Analizada | Baja (3.8) | 0.20% | — | Idccms | 27/6/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=del&dataType=&dataID=1. | |
| Analizada | Baja (3.8) | 0.20% | — | Idccms | 27/6/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=add. | |
| Analizada | Media (6.8) | 0.21% | — | Idccms | 27/6/2024 | 17/6/2026 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=add. |