Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior

Críticas / altas1367▲ 28 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-20133	Modificada	Crítica (9.8)	0.74%	—	Itechscripts JOB Portal Script	16/7/2022	17/6/2026	A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is possible to initiate the attack remotely.
CVE-2018-20643	Modificada	Media (6.5)	1.6%	—	Entrepreneur JOB Portal Script Project Entrepreneur JOB Portal Script	21/3/2019	17/6/2026	PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
CVE-2018-20642	Modificada	Media (6.5)	1.6%	—	Entrepreneur JOB Portal Script Project Entrepreneur JOB Portal Script	21/3/2019	17/6/2026	PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of profile editing) via crafted JavaScript code in the KeySkills field.
CVE-2018-20641	Modificada	Alta (8.8)	0.64%	—	Entrepreneur JOB Portal Script Project Entrepreneur JOB Portal Script	21/3/2019	17/6/2026	PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
CVE-2018-20640	Modificada	Media (5.4)	0.65%	—	Entrepreneur JOB Portal Script Project Entrepreneur JOB Portal Script	21/3/2019	17/6/2026	PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field.
CVE-2018-20639	Modificada	Media (6.1)	0.85%	—	Entrepreneur JOB Portal Script Project Entrepreneur JOB Portal Script	21/3/2019	17/6/2026	PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar.
CVE-2018-7469	Modificada	Media (4.8)	0.53%	—	Entrepreneur JOB Portal Script Project Entrepreneur JOB Portal Script	28/2/2018	17/6/2026	PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the p_name (aka Edit Category Name) field to admin/categories_industry.php (aka Categories - Industry Type).
CVE-2017-17596	Modificada	Crítica (9.8)	3.0%	—	Entrepreneur JOB Portal Script Project Entrepreneur JOB Portal Script	13/12/2017	17/6/2026	Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.