Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2731▼ 88 respecto a la semana anterior

Críticas / altas1419▲ 189 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)83▼ 429 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-26951	Modificada	Media (5.4)	0.33%	—	Onekeyadmin	16/3/2023	17/6/2026	onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.
CVE-2023-26957	Modificada	Crítica (9.1)	0.61%	—	Onekeyadmin	9/3/2023	17/6/2026	onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins.
CVE-2023-26948	Modificada	Alta (7.5)	0.60%	—	Onekeyadmin	9/3/2023	17/6/2026	onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.
CVE-2023-26956	Modificada	Alta (7.5)	0.67%	—	Onekeyadmin	8/3/2023	17/6/2026	onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.
CVE-2023-26952	Modificada	Media (5.4)	0.38%	—	Onekeyadmin	8/3/2023	17/6/2026	onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.
CVE-2023-26950	Modificada	Media (5.4)	0.38%	—	Onekeyadmin	8/3/2023	17/6/2026	onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module.
CVE-2023-26953	Modificada	Media (4.8)	0.46%	—	Onekeyadmin	7/3/2023	17/6/2026	onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.
CVE-2023-26955	Modificada	Media (5.4)	0.38%	—	Onekeyadmin Project Onekeyadmin	7/3/2023	17/6/2026	onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group module.
CVE-2023-26954	Modificada	Media (5.4)	0.38%	—	Onekeyadmin Project Onekeyadmin	7/3/2023	17/6/2026	onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module.
CVE-2023-26949	Modificada	Crítica (9.8)	0.94%	—	Onekeyadmin	6/3/2023	17/6/2026	An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file.