Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2570▼ 302 respecto a la semana anterior

Críticas / altas1352▲ 100 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

11 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-22498	Aplazada	Alta (8.1)	0.50%	—	Elated-themes Laurent^AI	25/3/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusion.This issue affects Laurent: from n/a through <= 3.1.
CVE-2026-24609	Aplazada	Alta (7.5)	0.35%	—	Elated-themes Laurent^AI	23/1/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusion.This issue affects Laurent: from n/a through <= 3.1.
CVE-2026-24608	Aplazada	Alta (7.5)	0.45%	—	Elated-themes Laurent Core^AI	23/1/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent Core laurent-core allows PHP Local File Inclusion.This issue affects Laurent Core: from n/a through <= 2.4.1.
CVE-2012-4547	Modificada	Media (4.3)	5.8%	—	Laurent Destailleur Awstats	31/10/2012	16/6/2026	Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.
CVE-2010-1017	Modificada	Alta (7.5)	1.1%	—	Laurent Foulloy SAV Filter Months	19/3/2010	16/6/2026	SQL injection vulnerability in the SAV Filter Months (sav_filter_months) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-1016	Modificada	Alta (7.5)	1.1%	—	Laurent Foulloy SAV Filter Selectors	19/3/2010	16/6/2026	SQL injection vulnerability in the SAV Filter Selectors (sav_filter_selectors) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-1015	Modificada	Alta (7.5)	1.1%	—	Laurent Foulloy SAV Filter ABC	19/3/2010	16/6/2026	SQL injection vulnerability in the SAV Filter Alphabetic (sav_filter_abc) extension before 1.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2006-6041	Modificada	Alta (7.5)	3.6%	—	Laurent VAN DEN Reysen Work System E-commerce	22/11/2006	16/6/2026	Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the g_include parameter to (1) index.php, (2) module/forum/forum.php, (3) unspecified files under module/, and…
CVE-2006-4751	Modificada	Media (6.8)	2.2%	—	Laurentiu Matei Expandable Home Page CMS	13/9/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the errcode parameter.
CVE-2006-4752	Modificada	Media (5)	1.6%	—	Laurentiu Matei Expandable Home Page CMS	13/9/2006	16/6/2026	Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter.
CVE-2004-0246	Modificada	Alta (10)	4.4%	—	Laurent Adda LES Commentaires	23/11/2004	16/6/2026	Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter.