Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
–

56 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaCrítica (9.8)1.00%—Event Management System Project Event Management System7/1/202317/6/2026
A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /royal_event/userregister.php. The manipulation leads to improper authentication. The attack may be initiated remotely. The identifier VDB-195785 was…
ModificadaAlta (7.2)1.3%—Event Management System Project Event Management System15/9/202217/6/2026
Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
ModificadaAlta (8.8)57%💥 ExploitEvent Management System Project Event Management System5/5/202217/6/2026
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.
ModificadaCrítica (9.8)3.2%💥 ExploitSchool Event Management System Project School Event Management System16/11/201817/6/2026
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.
ModificadaAlta (8.8)2.4%💥 ExploitSchool Event Management System Project School Event Management System16/11/201817/6/2026
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
ModificadaCrítica (9.8)9.5%💥 ExploitSchool Event Management System Project School Event Management System16/11/201817/6/2026
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.
Orbitaley — Vulnerabilidades