Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2568▼ 304 respecto a la semana anterior
Críticas / altas1352▲ 100 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Baja (2) | 0.38% | — | Roothub | 26/7/2025 | 17/6/2026 | A vulnerability was found in Roothub up to 2.6. It has been declared as problematic. Affected by this vulnerability is the function Edit of the file src/main/java/cn/roothub/web/admin/SystemConfigAdminController.java. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has… | |
| Analizada | Crítica (9.8) | 0.50% | — | Roothub | 7/5/2024 | 17/6/2026 | Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function.. | |
| Analizada | Media (6.3) | 0.34% | — | Roothub | 7/5/2024 | 17/6/2026 | Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function. | |
| Modificada | Crítica (9.8) | 0.78% | — | Roothub | 7/5/2024 | 9/7/2026 | Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file. | |
| Analizada | Media (6.3) | 0.33% | — | Roothub | 6/5/2024 | 17/6/2026 | Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function. | |
| Modificada | Alta (8) | 2.5% | — | Roothub | 13/4/2022 | 17/6/2026 | Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which could lead to remote arbitrary code execution. | |
| Modificada | Crítica (9.8) | 1.3% | — | Roothub Project Roothub | 12/4/2022 | 17/6/2026 | SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely. | |
| Modificada | Crítica (9.8) | 1.3% | — | Roothub Project Roothub | 12/4/2022 | 17/6/2026 | SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely. |