Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2726▼ 82 respecto a la semana anterior
Críticas / altas1416▲ 189 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)100▼ 400 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.6% | — | Liulishuo Filedownloader | 18/5/2018 | 17/6/2026 | util/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. If an attacker places "../" in the file name, the file can be stored in an unintended directory because of Directory Traversal. | |
| Modificada | Media (6.1) | 1.4% | — | Filedownload Project Filedownload | 6/10/2016 | 17/6/2026 | XSS in filedownload v1.4 wordpress plugin | |
| Modificada | Crítica (9.8) | 2.6% | — | Filedownload Project Filedownload | 6/10/2016 | 17/6/2026 | Blind SQL Injection in filedownload v1.4 wordpress plugin | |
| Modificada | Alta (8.2) | 1.8% | — | Filedownload Project Filedownload | 6/10/2016 | 17/6/2026 | Open Proxy in filedownload v1.4 wordpress plugin | |
| Modificada | Alta (7.5) | 1.5% | — | Modxcms Filedownload | 1/2/2007 | 16/6/2026 | download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials. |