Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior
Críticas / altas1313▼ 190 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior
109 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.63% | — | Inventory Management System Project Inventory Management System | 6/8/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file sell_return.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The associated identifier of this… | |
| Modificada | Crítica (9.8) | 0.50% | — | Inventory Management System Project Inventory Management System | 6/8/2023 | 17/6/2026 | A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit_update.php of the component Password Handler. The manipulation of the argument user_id leads to improper access controls. The attack can be initiated… | |
| Modificada | Crítica (9.8) | 0.63% | — | Inventory Management System Project Inventory Management System | 6/8/2023 | 17/6/2026 | A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file edit_sell.php. The manipulation of the argument up_pid leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-236217 was assigned… | |
| Modificada | Media (4.8) | 0.48% | — | Inventory Management System Project Inventory Management System | 10/2/2023 | 17/6/2026 | A stored cross-site scripting (XSS) vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter. | |
| Modificada | Media (4.8) | 0.48% | — | Inventory Management System Project Inventory Management System | 10/2/2023 | 17/6/2026 | A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Client Name parameter. | |
| Modificada | Media (4.8) | 0.48% | — | Inventory Management System Project Inventory Management System | 10/2/2023 | 17/6/2026 | A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter. | |
| Modificada | Media (4.8) | 0.48% | — | Inventory Management System Project Inventory Management System | 10/2/2023 | 17/6/2026 | A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Categories Name parameter. | |
| Modificada | Crítica (9.8) | 1.7% | — | Bdtask Multi Store Inventory Management System | 20/5/2022 | 17/6/2026 | Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request. | |
| Modificada | Alta (7.5) | 1.5% | — | Bdtask Multi Store Inventory Management System | 20/5/2022 | 17/6/2026 | Multi Store Inventory Management System v1.0 was discovered to contain an information disclosure vulnerability which allows attackers to access sensitive files. |