Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.1) | 0.79% | — | Portfoliocms Project Portfoliocms | 3/2/2023 | 17/6/2026 | Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php. | |
| Modificada | Alta (7.5) | 0.75% | — | Portfoliocms Project Portfoliocms | 31/1/2023 | 17/6/2026 | Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation. | |
| Modificada | Media (4.3) | 0.36% | — | Portfoliocms Project Portfoliocms | 25/8/2018 | 17/6/2026 | An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php. | |
| Modificada | Alta (8.8) | 0.47% | — | Portfoliocms Project Portfoliocms | 25/8/2018 | 17/6/2026 | An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin/portfolio.php?newpage=true. | |
| Modificada | Alta (8.8) | 1.1% | — | Portfoliocms Project Portfoliocms | 13/6/2018 | 17/6/2026 | portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI. | |
| Modificada | Alta (7.2) | 1.1% | — | Portfoliocms Project Portfoliocms | 11/6/2018 | 17/6/2026 | portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter. |