Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior
Críticas / altas1367▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior
11 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 1.2% | — | Phpkobo Ajaxnewsticker | 28/9/2023 | 9/7/2026 | An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. | |
| Modificada | Media (6.1) | 0.66% | — | Phpkobo Ajaxnewsticker | 28/9/2023 | 9/7/2026 | Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component. | |
| Modificada | Media (6.1) | 0.66% | — | Phpkobo Ajaxnewsticker | 28/9/2023 | 9/7/2026 | Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component. | |
| Modificada | Media (6.1) | 0.66% | — | Phpkobo Ajaxnewsticker | 27/9/2023 | 9/7/2026 | Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component. | |
| Modificada | Alta (8.8) | 0.54% | — | Phpkobo Ajaxnewsticker | 27/9/2023 | 9/7/2026 | Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component. | |
| Modificada | Media (6.1) | 0.66% | — | Phpkobo Ajaxnewsticker | 27/9/2023 | 9/7/2026 | Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component. | |
| Modificada | Crítica (9.8) | 1.4% | — | Phpkobo Ajaxnewsticker | 27/9/2023 | 9/7/2026 | An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. | |
| Modificada | Media (6.1) | 0.70% | — | Phpkobo Ajaxnewsticker | 27/9/2023 | 9/7/2026 | Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component. | |
| Modificada | Media (6.1) | 0.61% | — | Phpkobo Ajaxnewsticker | 27/9/2023 | 9/7/2026 | Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component. | |
| Modificada | Alta (7.5) | 1.1% | — | X-dev Xnews | 31/1/2007 | 16/6/2026 | Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) from, and (3) q parameters, different vectors than CVE-2007-0569. NOTE: The provenance of this information is… | |
| Modificada | Alta (7.5) | 2.3% | — | X-dev Xnews | 30/1/2007 | 16/6/2026 | SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a shownews action. |