Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior
Críticas / altas1367▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior
16 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.0% | — | Txjia Imcat | 24/2/2023 | 17/6/2026 | An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function. | |
| Modificada | Media (6.5) | 0.65% | — | Txjia Imcat | 24/2/2023 | 17/6/2026 | Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get_contents function. | |
| Modificada | Alta (8.8) | 0.61% | — | Txjia Imcat | 3/2/2023 | 17/6/2026 | Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page. | |
| Modificada | Alta (8.8) | 0.61% | — | Txjia Imcat | 3/2/2023 | 17/6/2026 | Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification. | |
| Modificada | Alta (8.8) | 2.5% | — | Txjia Imcat | 18/8/2021 | 17/6/2026 | A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code. | |
| Modificada | Crítica (9.8) | 1.4% | — | Txjia Imcat | 23/6/2021 | 17/6/2026 | SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php. | |
| Modificada | Alta (7.2) | 2.3% | — | Txjia Imcat | 9/12/2020 | 17/6/2026 | imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality. | |
| Modificada | Crítica (9.8) | 1.5% | — | Txjia Imcat | 12/8/2019 | 17/6/2026 | An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action. | |
| Modificada | Media (5.4) | 0.61% | — | Txjia Imcat | 18/2/2019 | 17/6/2026 | imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter. | |
| Modificada | Media (6.1) | 0.94% | — | Txjia Imcat | 30/12/2018 | 17/6/2026 | imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI. | |
| Modificada | Media (4.9) | 1.9% | — | Txjia Imcat | 30/12/2018 | 17/6/2026 | imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter. | |
| Modificada | Media (5.3) | 2.7% | — | Txjia Imcat | 30/12/2018 | 17/6/2026 | imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI. | |
| Modificada | Alta (7.5) | 12% | — | Txjia Imcat | 30/12/2018 | 17/6/2026 | imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI. | |
| Modificada | Media (5.3) | 2.7% | — | Txjia Imcat | 30/12/2018 | 17/6/2026 | imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI. | |
| Modificada | Alta (7.5) | 2.6% | — | Txjia Imcat | 30/12/2018 | 17/6/2026 | imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI. | |
| Modificada | Crítica (9.8) | 2.4% | — | Txjia Imcat | 30/12/2018 | 17/6/2026 | imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file. |