Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-20474	Modificada	Alta (7.5)	1.7%	—	White Shark Systems Project White Shark Systems	21/6/2021	17/6/2026	White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituser.php files failing to filter the csa_to_user parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
CVE-2020-20473	Modificada	Alta (7.5)	1.7%	—	White Shark Systems Project White Shark Systems	21/6/2021	17/6/2026	White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
CVE-2020-20472	Modificada	Media (5.3)	1.5%	—	White Shark Systems Project White Shark Systems	21/6/2021	17/6/2026	White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The if_get_addbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site.
CVE-2020-20471	Modificada	Alta (8.8)	2.4%	—	White Shark Systems Project White Shark Systems	21/6/2021	17/6/2026	White Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php, remote attackers can exploit this vulnerability to escalate to admin privileges.
CVE-2020-20470	Modificada	Media (5.3)	0.90%	—	White Shark Systems Project White Shark Systems	21/6/2021	17/6/2026	White Shark System (WSS) 1.3.2 has web site physical path leakage vulnerability.
CVE-2020-20469	Modificada	Alta (7.5)	1.7%	—	White Shark Systems Project White Shark Systems	21/6/2021	17/6/2026	White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files failing to filter the csa_to_user parameter, remote attackers can exploit the vulnerability to obtain database sensitive information.
CVE-2020-20468	Modificada	Media (6.5)	0.50%	—	White Shark Systems Project White Shark Systems	21/6/2021	17/6/2026	White Shark System (WSS) 1.3.2 is vulnerable to CSRF. Attackers can use the user_edit_password.php file to modify the user password.
CVE-2020-20467	Modificada	Media (6.5)	1.2%	—	White Shark Systems Project White Shark Systems	21/6/2021	17/6/2026	White Shark System (WSS) 1.3.2 is vulnerable to sensitive information disclosure via default_task_add.php, remote attackers can exploit the vulnerability to create a task.
CVE-2020-20466	Modificada	Crítica (9.8)	1.8%	—	White Shark Systems Project White Shark Systems	21/6/2021	17/6/2026	White Shark System (WSS) 1.3.2 is vulnerable to unauthorized access via user_edit_password.php, remote attackers can modify the password of any user.