Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2811▲ 64 respecto a la semana anterior
Críticas / altas1484▲ 296 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)68▼ 448 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.42% | — | Spaceapplications Yacms | 20/11/2023 | 17/6/2026 | An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking. | |
| Modificada | Media (5.4) | 0.60% | — | Spaceapplications Yacms | 20/11/2023 | 17/6/2026 | Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer. | |
| Modificada | Media (5.4) | 0.60% | — | Spaceapplications Yacms | 20/11/2023 | 17/6/2026 | Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser. | |
| Modificada | Alta (7.2) | 1.4% | — | Ayacms Project Ayacms | 27/1/2023 | 17/6/2026 | AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php. | |
| Modificada | Crítica (9.8) | 0.80% | — | Ayacms Project Ayacms | 22/12/2022 | 17/6/2026 | AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php | |
| Modificada | Crítica (9.8) | 0.74% | — | Ayacms Project Ayacms | 22/12/2022 | 17/6/2026 | AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php | |
| Modificada | Alta (8.8) | 1.1% | — | Ayacms Project Ayacms | 22/12/2022 | 17/6/2026 | AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command execution by inserting malicious code. | |
| Modificada | Crítica (9.8) | 1.5% | — | Ayacms Project Ayacms | 7/12/2022 | 17/6/2026 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE). | |
| Modificada | Alta (8.8) | 0.79% | — | Ayacms Project Ayacms | 6/12/2022 | 17/6/2026 | AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability. | |
| Modificada | Crítica (9.8) | 0.99% | — | Ayacms Project Ayacms | 10/11/2022 | 17/6/2026 | AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. | |
| Modificada | Alta (7.2) | 1.9% | — | Ayacms Project Ayacms | 1/3/2022 | 17/6/2026 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php, | |
| Modificada | Alta (8.8) | 0.59% | — | Ayacms Project Ayacms | 2/11/2021 | 17/6/2026 | Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts. |