Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2624▼ 236 respecto a la semana anterior

Críticas / altas1384▲ 151 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-5277	Modificada	Media (5.4)	0.70%	—	Prestashop Faceted Search Module	25/3/2020	17/6/2026	PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is fixed in 3.5.0
CVE-2014-5098	Modificada	Media (4.3)	1.9%	—	Jamroom Search Module	20/10/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script or HTML via the query string to search/results/.
CVE-2014-8745	Modificada	Baja (3.5)	1.0%	—	Drupal Custom Search Module	13/10/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.15 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary label.
CVE-2014-7870	Modificada	Baja (3.5)	0.95%	—	Drupal Custom Search Module	6/10/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.14 for Drupal allows remote authenticated users with the "administer custom search" permission to inject arbitrary web script or HTML via the "Label text" field to…
CVE-2013-6804	Modificada	Media (4.3)	1.2%	—	Jamroom Search Module	5/12/2013	17/6/2026	Cross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the search_string parameter to search/results/all/1/4.
CVE-2013-4384	Modificada	Media (4.3)	1.8%	—	Google Site Search Project Google Site Search Module	9/10/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API.
CVE-2012-4744	Modificada	Media (4.3)	1.2%	—	Eos.pe Siche Search Module	31/8/2012	16/6/2026	Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVE-2012-4743	Modificada	Alta (7.5)	1.3%	—	Eos.pe Siche Search Module	31/8/2012	16/6/2026	Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the (1) ss, (2) sm, (3) align, or (4) category parameters.