Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2741▲ 14 respecto a la semana anterior
Críticas / altas1459▲ 324 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.65% | — | Mambo-foundation Mambo CMS | 12/2/2020 | 16/6/2026 | Mambo CMS through 4.6.5 has multiple XSS. | |
| Modificada | Media (5.3) | 1.6% | — | Mambo-foundation Mambo CMS | 15/2/2019 | 16/6/2026 | A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver. | |
| Modificada | Media (5) | 2.5% | — | Mambo-foundation Mambo CMS | 9/6/2014 | 16/6/2026 | Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file. | |
| Modificada | Baja (2.1) | 0.46% | — | Mambo-foundation Mambo CMS | 9/6/2014 | 16/6/2026 | Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file. | |
| Modificada | Baja (2.1) | 0.47% | — | Mambo-foundation Mambo CMS | 9/6/2014 | 16/6/2026 | Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors. |