Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior

Críticas / altas1381▼ 36 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior

85 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-30373	Modificada	Alta (7.2)	0.97%	—	AIR Cargo Management System Project AIR Cargo Management System	13/5/2022	17/6/2026	Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/manage_cargo_type.php?id=.
CVE-2022-30372	Modificada	Alta (7.2)	0.97%	—	AIR Cargo Management System Project AIR Cargo Management System	13/5/2022	17/6/2026	Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo.
CVE-2022-30371	Modificada	Alta (7.2)	0.97%	—	AIR Cargo Management System Project AIR Cargo Management System	13/5/2022	17/6/2026	Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/view_cargo_type.php?id=.
CVE-2022-30370	Modificada	Crítica (9.8)	1.1%	—	AIR Cargo Management System Project AIR Cargo Management System	13/5/2022	17/6/2026	Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo_type.
CVE-2021-25003	Modificada	Crítica (9.8)	56%	💥 Exploit	Wptaskforce Wpcargo Track & Trace	14/3/2022	17/6/2026	The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE
CVE-2022-26169	Modificada	Crítica (9.8)	1.3%	—	AIR Cargo Management System Project AIR Cargo Management System	2/3/2022	17/6/2026	Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the ref_code parameter.
CVE-2021-43388	Modificada	Alta (7.5)	0.57%	—	Unisys Cargo Mobile	14/12/2021	17/6/2026	Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. The issue is addressed by ensuring that the allowBackup flag (in the manifest) is False.
CVE-2013-4704	Modificada	Media (4.3)	1.1%	—	Chamanet Chamacargo	16/9/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in ChamaNet ChamaCargo 7.0000 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-6054	Modificada	Media (5)	1.3%	—	Preprojects.com PRE Courier AND Cargo Business	4/2/2009	16/6/2026	PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.
CVE-2006-6249	Modificada	Media (6.8)	1.4%	—	Chama Cargo	4/12/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.