Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior
Críticas / altas1264▼ 228 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior
599 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Baja (2.1) | 0.42% | — | Campcodes Grocery Sales AND Inventory System | 6/9/2025 | 17/6/2026 | A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /index.php. The manipulation of the argument page results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. | |
| Analizada | Media (5.5) | 0.48% | — | Campcodes Grocery Sales AND Inventory System | 6/9/2025 | 17/6/2026 | A security vulnerability has been detected in Campcodes Grocery Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=delete_sales. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly… | |
| Analizada | Media (5.5) | 0.48% | — | Campcodes Grocery Sales AND Inventory System | 6/9/2025 | 17/6/2026 | A weakness has been identified in Campcodes Grocery Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=save_receiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to… | |
| Analizada | Baja (2.1) | 0.41% | — | Campcodes Sales AND Inventory System | 3/9/2025 | 17/6/2026 | A flaw has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /index.php. Executing manipulation of the argument page can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used. | |
| Analizada | Baja (2.1) | 0.41% | — | Campcodes Sales AND Inventory System | 3/9/2025 | 17/6/2026 | A security vulnerability has been detected in Campcodes Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Such manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Computer Sales AND Inventory System | 1/9/2025 | 17/6/2026 | A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/pos_transac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The exploit has been published… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Feeds Product Inventory System | 1/9/2025 | 17/6/2026 | A security vulnerability has been detected in Campcodes Online Feeds Product Inventory System 1.0. This vulnerability affects unknown code of the file /feeds/index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been… | |
| Analizada | Baja (2.1) | 0.40% | — | Deepakmisal24 Chemical Inventory Management System | 1/9/2025 | 17/6/2026 | A vulnerability was identified in deepakmisal24 Chemical Inventory Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory_form.php. Such manipulation of the argument chem_name leads to sql injection. The attack may be performed from remote. The exploit is… | |
| Aplazada | Alta (7.1) | 0.17% | — | Dmitry V Barcode Scanner With Inventory AND Order ManagerAI | 31/8/2025 | 26/9/2026 | Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.5.3. | |
| Aplazada | Media (4.9) | 0.40% | — | Dmitry V Barcode Scanner With Inventory AND Order ManagerAI | 14/8/2025 | 17/6/2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner with Inventory &… | |
| Analizada | Media (5.5) | 0.62% | — | Campcodes Sales AND Inventory System | 21/7/2025 | 17/6/2026 | A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settings_update.php of the component Setting Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit… | |
| Analizada | Media (5.5) | 0.49% | — | Campcodes Sales AND Inventory System | 13/7/2025 | 17/6/2026 | A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/product_update.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the… | |
| Analizada | Media (5.5) | 0.45% | — | Campcodes Sales AND Inventory System | 13/7/2025 | 17/6/2026 | A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/product_update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public… | |
| Analizada | Media (5.5) | 0.56% | — | Campcodes Sales AND Inventory System | 13/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receipt_credit.php. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.56% | — | Campcodes Sales AND Inventory System | 13/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprint_cash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.49% | — | Campcodes Sales AND Inventory System | 12/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.45% | — | Campcodes Sales AND Inventory System | 12/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/product_add.php. The manipulation of the argument prod_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the… | |
| Analizada | Media (5.5) | 0.45% | — | Campcodes Sales AND Inventory System | 8/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customer_account.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.50% | — | Campcodes Sales AND Inventory System | 1/7/2025 | 17/6/2026 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/payment_add.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to… | |
| Analizada | Media (5.5) | 0.49% | — | Code-projects Inventory Management System | 30/6/2025 | 17/6/2026 | A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /php_action/editUser.php. The manipulation of the argument edituserName leads to sql injection. It is possible to launch the attack remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.49% | — | Code-projects Inventory Management System | 30/6/2025 | 17/6/2026 | A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php_action/removeUser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed… | |
| Analizada | Media (5.5) | 0.49% | — | Code-projects Inventory Management System | 30/6/2025 | 17/6/2026 | A vulnerability classified as critical has been found in code-projects Inventory Management System 1.0. Affected is an unknown function of the file /php_action/createUser.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed… | |
| Analizada | Baja (2) | 0.40% | — | Fabian Product Inventory System | 29/6/2025 | 17/6/2026 | A vulnerability was found in code-projects Product Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit_user.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public… | |
| Analizada | Baja (2) | 0.40% | — | Fabian Product Inventory System | 29/6/2025 | 17/6/2026 | A vulnerability has been found in code-projects Product Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit_product.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the… | |
| Analizada | Media (5.5) | 0.49% | — | Fabian Product Inventory System | 29/6/2025 | 17/6/2026 | A vulnerability, which was classified as critical, was found in code-projects Product Inventory System 1.0. This affects an unknown part of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been… |