Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3026▼ 51 respecto a la semana anterior
Críticas / altas1412▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)385▼ 125 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (10) | 0.45% | — | Dj-extensions Dj-jdownloadsAI | 20/7/2026 | 23/7/2026 | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE. | |
| Aplazada | Media (5.4) | 0.12% | — | JdownloadsAIJoomlaAI | 28/10/2025 | 17/6/2026 | Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered. | |
| Modificada | Media (4.3) | 0.88% | — | Jdownloads | 6/5/2022 | 17/6/2026 | In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files | |
| Modificada | Alta (7.5) | 1.1% | — | Jdownloads | 25/9/2020 | 17/6/2026 | SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter. | |
| Modificada | Alta (7.5) | 1.1% | — | Jdownloads | 25/9/2020 | 17/6/2026 | SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter. | |
| Modificada | Alta (7.5) | 1.1% | — | Jdownloads | 25/9/2020 | 17/6/2026 | SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter. | |
| Modificada | Alta (7.5) | 1.1% | — | Jdownloads | 24/9/2020 | 17/6/2026 | SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter. | |
| Modificada | Media (6.1) | 3.9% | — | Jdownloads | 12/4/2018 | 17/6/2026 | The jDownloads extension before 3.2.59 for Joomla! has XSS. |