Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2841▼ 157 respecto a la semana anterior

Críticas / altas1370▲ 51 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 258 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-30952	Aplazada	Media (6.1)	0.33%	—	Pescms-team^AI	17/4/2024	17/6/2026	A stored cross-site scripting (XSS) vulnerability in PESCMS-TEAM v2.3.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the domain input field under /youdoamin/?g=Team&m=Setting&a=action.
CVE-2021-31679	Modificada	Media (6.5)	0.56%	—	Pescms Team	6/7/2022	17/6/2026	An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers.
CVE-2021-31678	Modificada	Media (6.5)	0.56%	—	Pescms Team	6/7/2022	17/6/2026	An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company.
CVE-2021-31677	Modificada	Media (6.5)	0.59%	—	Pescms Team	6/7/2022	17/6/2026	An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords.
CVE-2021-31676	Modificada	Media (6.1)	0.89%	—	Pescms Team	6/7/2022	17/6/2026	A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction.
CVE-2020-28092	Modificada	Media (6.1)	2.7%	—	Pescms Team	17/11/2020	17/6/2026	PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&status=0&id=,?g=Team&m=Task&a=my&status=1&id=,?g=Team&m=Task&a=my&status=10&id=
CVE-2018-16371	Modificada	Media (6.1)	0.71%	—	Pescms Team	3/9/2018	17/6/2026	PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=User_group&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=.
CVE-2018-16370	Modificada	Crítica (9.8)	1.8%	—	Pescms Team	3/9/2018	17/6/2026	In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.