Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2989▼ 87 respecto a la semana anterior
Críticas / altas1458▲ 97 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
81 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Baja (2.7) | 0.32% | — | Sourcecodester Storage Unit Rental Management SystemAI | 14/4/2026 | 17/6/2026 | Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php. | |
| Aplazada | Baja (2.7) | 0.31% | — | Sourcecodester Storage Unit Rental Management SystemAI | 14/4/2026 | 17/6/2026 | Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php. | |
| Aplazada | Baja (2.7) | 0.31% | — | Sourcecodester Storage Unit Rental Management SystemAI | 14/4/2026 | 17/6/2026 | SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage_rent.php. | |
| Aplazada | Baja (2.7) | 0.31% | — | Sourcecodester Storage Unit Rental Management SystemAI | 14/4/2026 | 17/6/2026 | SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage_storage_unit.php. | |
| Aplazada | Media (6.1) | 0.26% | — | Vikrentitems Flexible Rental Management SystemAI | 12/12/2025 | 17/6/2026 | The VikRentItems Flexible Rental Management System plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'delto' parameter in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject… | |
| Analizada | Baja (2.1) | 0.32% | — | Carmelo Rental Management System | 11/12/2025 | 17/6/2026 | A vulnerability was found in code-projects Rental Management System 2.0. This affects an unknown function of the file Transaction.java of the component Log Handler. Performing manipulation results in crlf injection. The attack can be initiated remotely. The exploit has been made public and could be used. | |
| Analizada | Baja (2) | 0.34% | — | Mayurik Best House Rental Management System | 7/11/2025 | 17/6/2026 | A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function delete_house of the file /admin_class.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be… | |
| Analizada | Baja (2) | 0.41% | — | Mayurik Best House Rental Management System | 3/11/2025 | 17/6/2026 | A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delete_payment of the file /admin_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public… | |
| Analizada | Baja (2) | 0.41% | — | Mayurik Best House Rental Management System | 2/11/2025 | 17/6/2026 | A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function save_tenant of the file /admin_class.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be… | |
| Analizada | Baja (2) | 0.41% | — | Mayurik Best House Rental Management System | 2/11/2025 | 17/6/2026 | A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability is the function save_category of the file /admin_class.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit is now public and… | |
| Analizada | Baja (2) | 0.41% | — | Mayurik Best House Rental Management System | 27/10/2025 | 17/6/2026 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house of the file /admin_class.php. Performing manipulation of the argument house_no results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be… | |
| Analizada | Media (5.5) | 0.48% | — | Mayurik Best House Rental Management System | 27/10/2025 | 17/6/2026 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /admin_class.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be… | |
| Analizada | Media (5.4) | 0.29% | — | Mayurik House Rental Management System | 14/1/2025 | 17/6/2026 | Sourcecodester House Rental Management system v1.0 is vulnerable to Cross Site Scripting (XSS) in rental/manage_categories.php. | |
| Aplazada | Alta (8.8) | 1.3% | 💥 PoC | CAR Rental Management SystemAI | 7/1/2025 | 5/7/2026 | An authenticated arbitrary file upload vulnerability in Car Rental Management System v1.0 to v1.3 allows attackers to execute arbitrary code via uploading a crafted file. | |
| Analizada | Media (6.9) | 0.68% | — | Codeastro House Rental Management System | 26/12/2024 | 17/6/2026 | A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signin.php. The manipulation of the argument u/p leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the… | |
| Analizada | Media (6.9) | 0.68% | — | Codeastro House Rental Management System | 26/12/2024 | 17/6/2026 | A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ownersignup.php. The manipulation of the argument f/e/p/m/o/n/c/s/ci/a leads to sql injection. The attack can be launched remotely. The… | |
| Analizada | Media (6.9) | 0.44% | — | Mayurik Best House Rental Management System | 9/12/2024 | 17/6/2026 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploit has been… | |
| Analizada | Media (6.9) | 0.86% | — | Mayurik Best House Rental Management System | 27/11/2024 | 17/6/2026 | A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=delete_tenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization. It is possible to… | |
| Analizada | Media (6.9) | 0.34% | — | Mayurik Best House Rental Management System | 26/11/2024 | 17/6/2026 | A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=delete_user of the component POST Request Handler. The manipulation leads to cross-site request forgery. It is possible to… | |
| Analizada | Media (5.3) | 0.53% | — | Mayurik Best House Rental Management System | 26/11/2024 | 17/6/2026 | A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue affects some unknown processing of the file /rental/ajax.php?action=save_tenant. The manipulation of the argument lastname/firstname/middlename leads to cross site scripting. The… | |
| Analizada | Crítica (9.8) | 0.89% | — | Mayurik Best House Rental Management System | 25/10/2024 | 17/6/2026 | SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary code via the username parameter of the login request. | |
| Analizada | Media (5.3) | 0.57% | — | Mayurik Best House Rental Management System | 24/10/2024 | 17/6/2026 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected by this issue is the function delete_tenant of the file /ajax.php?action=delete_tenant. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit… | |
| Analizada | Media (5.3) | 0.46% | — | Mayurik Best House Rental Management System | 24/10/2024 | 17/6/2026 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?page=tenants of the component Manage Tenant Details. The manipulation of the argument Last Name/First Name/Middle Name leads to cross site… | |
| Analizada | Media (5.3) | 0.61% | — | Mayurik Best House Rental Management System | 20/9/2024 | 17/6/2026 | A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=update_account. The manipulation of the argument firstname/lastname/email leads to sql injection. The attack can be initiated… | |
| Analizada | Media (6.9) | 0.70% | — | Mayurik Best House Rental Management System | 20/9/2024 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=signup. The manipulation of the argument firstname/lastname/email leads to sql injection. The attack may be… |