Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3064▲ 586 respecto a la semana anterior
Críticas / altas1461▲ 295 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▲ 175 respecto a la semana anterior
10 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.8) | 0.60% | — | Phpbugtracker Project Phpbugtracker | 6/10/2017 | 17/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. | |
| Modificada | Crítica (9.8) | 1.6% | — | Phpbugtracker Project Phpbugtracker | 6/10/2017 | 17/6/2026 | Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. | |
| Modificada | Crítica (9.8) | 1.4% | — | Phpbugtracker Project Phpbugtracker | 6/10/2017 | 17/6/2026 | Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to project.php, the (2) group_id parameter to group.php, the (3) status_id parameter to status.php, the (4) resolution_id parameter to resolution.php, the… | |
| Modificada | Media (4.8) | 1.5% | — | Phpbugtracker Project Phpbugtracker | 6/10/2017 | 17/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. | |
| Modificada | Media (4.8) | 0.63% | — | Phpbugtracker Project Phpbugtracker | 6/10/2017 | 17/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) project name parameter to project.php; the (2) use_js parameter to user.php; the (3) use_js parameter to group.php; the (4) Description… | |
| Modificada | Alta (8.8) | 1.8% | — | Phpbugtracker Project Phpbugtracker | 6/10/2017 | 17/6/2026 | Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown parameters. | |
| Modificada | Alta (8) | 1.7% | — | Phpbugtracker Project Phpbugtracker | 6/10/2017 | 17/6/2026 | Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to (1) hijack the authentication of users for requests that cause an unspecified impact via the id parameter to project.php, (2) hijack the authentication of users for requests that… | |
| Modificada | Alta (7.5) | 1.0% | — | Benjamin Curtis Phpbugtracker | 1/6/2009 | 16/6/2026 | SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | |
| Modificada | Alta (7.5) | 0.99% | — | Benjamin Curtis Phpbugtracker | 1/6/2009 | 16/6/2026 | SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter. | |
| Modificada | Alta (7.5) | 1.2% | — | PhpbugtrackerAI | 31/12/2004 | 16/6/2026 | SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via (1) the bug_id parameter in a viewvotes operation or (2) the project parameter in an add operation. |