Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3215▲ 652 respecto a la semana anterior
Críticas / altas1508▲ 145 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)248▲ 236 respecto a la semana anterior
3979 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.72% | — | Oretnom23 Online Computer AND Laptop Store | 8/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has… | |
| Modificada | Alta (8.8) | 0.72% | — | Oretnom23 Online Computer AND Laptop Store | 8/4/2023 | 17/6/2026 | A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_category. The manipulation of the argument category leads to sql injection. The attack can be initiated remotely. The exploit… | |
| Modificada | Crítica (9.8) | 0.73% | — | Oretnom23 Online Computer AND Laptop Store | 8/4/2023 | 17/6/2026 | A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /classes/Master.php?f=delete_sub_category. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The… | |
| Modificada | Alta (8.8) | 0.72% | — | Oretnom23 Online Computer AND Laptop Store | 8/4/2023 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=save_sub_category of the component Subcategory Handler. The manipulation of the argument sub_category leads to… | |
| Modificada | Alta (8.8) | 1.1% | — | Oretnom23 Online Computer AND Laptop Store | 8/4/2023 | 17/6/2026 | A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_img of the component Image Handler. The manipulation of the argument path leads to path traversal. The attack can… | |
| Modificada | Crítica (9.8) | 0.80% | — | Oretnom23 Online Computer AND Laptop Store | 8/4/2023 | 17/6/2026 | A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The… | |
| Modificada | Alta (8.8) | 0.72% | — | Oretnom23 Online Computer AND Laptop Store | 8/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been rated as critical. This issue affects the function save_inventory of the file /admin/product/manage.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been… | |
| Modificada | Alta (8.8) | 0.72% | — | Oretnom23 Online Computer AND Laptop Store | 8/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/sales/index.php. The manipulation of the argument date_start/date_end leads to sql injection. The attack can be initiated remotely. The exploit… | |
| Modificada | Crítica (9.8) | 0.73% | — | Oretnom23 Online Computer AND Laptop Store | 8/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as critical. This affects an unknown part of the file /?p=products of the component Product Search. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely.… | |
| Modificada | Crítica (9.8) | 0.73% | — | Oretnom23 Online Computer AND Laptop Store | 8/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this issue is the function delete_brand of the file /admin/maintenance/brand.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has… | |
| Modificada | Crítica (9.8) | 0.89% | — | Oretnom23 Online Computer AND Laptop Store | 7/4/2023 | 17/6/2026 | A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/?page=user of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely.… | |
| Modificada | Media (6.1) | 0.38% | — | Albo Pretorio ON Line Project Albo Pretorio ON Line | 7/4/2023 | 17/6/2026 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On Line plugin <= 4.6.1 versions. | |
| Modificada | Media (6.1) | 0.61% | — | Oretnom23 Online Computer AND Laptop Store | 5/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=product/manage_product&id=2. The manipulation of the argument Product Name leads to cross site scripting. The attack may be… | |
| Modificada | Crítica (9.8) | 0.89% | — | Online Graduate Tracer System Project Online Graduate Tracer System | 5/4/2023 | 17/6/2026 | A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be… | |
| Modificada | Media (6.1) | 0.60% | — | Online Payroll System Project Online Payroll System | 5/4/2023 | 17/6/2026 | A vulnerability, which was classified as problematic, has been found in SourceCodester Online Payroll System 1.0. This issue affects some unknown processing of the file /admin/employee_edit.php. The manipulation of the argument of leads to cross site scripting. The attack may be initiated remotely. The exploit has… | |
| Modificada | Media (6.1) | 0.60% | — | Online Payroll System Project Online Payroll System | 5/4/2023 | 17/6/2026 | A vulnerability classified as problematic was found in SourceCodester Online Payroll System 1.0. This vulnerability affects unknown code of the file /admin/deduction_edit.php. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The identifier of this… | |
| Modificada | Media (6.1) | 0.60% | — | Online Payroll System Project Online Payroll System | 5/4/2023 | 17/6/2026 | A vulnerability classified as problematic has been found in SourceCodester Online Payroll System 1.0. This affects an unknown part of the file /admin/employee_add.php. The manipulation of the argument of leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to… | |
| Modificada | Crítica (9.8) | 0.81% | — | Online Payroll System Project Online Payroll System | 5/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed… | |
| Modificada | Crítica (9.8) | 0.81% | — | Online Payroll System Project Online Payroll System | 5/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cashadvance_row.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has… | |
| Modificada | Crítica (9.8) | 0.81% | — | Online Payroll System Project Online Payroll System | 5/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/attendance_row.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to… | |
| Modificada | Crítica (9.8) | 0.81% | — | Online Payroll System Project Online Payroll System | 5/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Online Payroll System 1.0 and classified as critical. This issue affects some unknown processing of the file attendance.php. The manipulation of the argument employee leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public… | |
| Modificada | Crítica (9.8) | 0.81% | — | Online Payroll System Project Online Payroll System | 5/4/2023 | 17/6/2026 | A vulnerability has been found in SourceCodester Online Payroll System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/deduction_row.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the… | |
| Modificada | Crítica (9.8) | 0.81% | — | Online Payroll System Project Online Payroll System | 5/4/2023 | 17/6/2026 | A vulnerability, which was classified as critical, was found in SourceCodester Online Payroll System 1.0. This affects an unknown part of the file /admin/employee_row.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the… | |
| Modificada | Crítica (9.8) | 4.4% | 💥 Exploit | Oretnom23 Online Computer AND Laptop Store | 4/4/2023 | 17/6/2026 | A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\system_info\index.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The… | |
| Modificada | Crítica (9.8) | 0.78% | — | Jenkins Convert TO Pipeline | 2/4/2023 | 17/6/2026 | Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build Steps, and Post-build Actions to the equivalent Pipeline step invocations, allowing attackers able to configure Freestyle projects to prepare a crafted configuration that injects… |