Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2635▼ 211 respecto a la semana anterior
Críticas / altas1376▲ 147 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.1) | 0.27% | — | No-cmsAI | 1/6/2026 | 22/7/2026 | No-Cms 1.0 contains an SQL injection vulnerability in the order_by parameter of the manage_privilege export endpoint that allows authenticated attackers to manipulate database queries. Attackers can submit POST requests to /nocms/main/manage_privilege/index/export with malicious SQL code in the order_by[0] parameter… | |
| Modificada | Media (4.8) | 0.56% | — | No-cms Project No-cms | 31/12/2018 | 17/6/2026 | No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter. | |
| Modificada | Media (4.8) | 0.56% | — | No-cms Project No-cms | 31/12/2018 | 17/6/2026 | No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter. | |
| Modificada | Media (6.1) | 0.71% | — | No-cms Project No-cms | 31/10/2018 | 17/6/2026 | No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter. | |
| Modificada | Alta (10) | 6.3% | — | Neutrino-cms Atomic Edition | 11/7/2008 | 16/6/2026 | Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in (1) usb and (2) del_pag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the intended access… |