Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

30 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-41645	Modificada	Alta (8.8)	3.2%	💥 PoC	Oretnom23 Budget AND Expense Tracker System	29/10/2021	17/6/2026	Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field. .
CVE-2021-26304	Modificada	Media (5.4)	0.58%	—	Phpgurukul Daily Expense Tracker System	29/1/2021	17/6/2026	PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter.
CVE-2021-26303	Modificada	Media (6.1)	0.78%	—	Phpgurukul Daily Expense Tracker System	29/1/2021	17/6/2026	PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.
CVE-2020-10107	Modificada	Media (5.4)	0.53%	—	Phpgurukul Daily Expense Tracker System	5/3/2020	17/6/2026	PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.
CVE-2020-10106	Modificada	Crítica (9.8)	1.2%	—	Phpgurukul Daily Expense Tracker System	5/3/2020	17/6/2026	PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt.