Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior
Críticas / altas1324▼ 116 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior
1090 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.5) | 0.35% | — | Oracle Peoplesoft Enterprise FIN Maintenance Management | 21/4/2026 | 17/6/2026 | Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN… | |
| Analizada | Media (6.5) | 0.35% | — | Oracle Peoplesoft Enterprise SCM Purchasing | 21/4/2026 | 17/6/2026 | Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful… | |
| Analizada | Media (6.5) | 0.41% | — | Oracle Peoplesoft Enterprise HCM Human Resources | 21/4/2026 | 17/6/2026 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Job Profile Manager). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human… | |
| Analizada | Media (6.6) | 0.29% | — | Oracle Peoplesoft Enterprise Peopletools | 21/4/2026 | 17/6/2026 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the… | |
| Analizada | Media (6.1) | 0.24% | — | Oracle Peoplesoft Enterprise Peopletools | 21/4/2026 | 17/6/2026 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks… | |
| Analizada | Media (6.5) | 0.41% | — | Oracle Peoplesoft Enterprise Human Capital Management Absence Management | 21/4/2026 | 17/6/2026 | Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Absence… | |
| Analizada | Media (5.4) | 0.15% | 💥 PoC | Oracle Peoplesoft Enterprise HCM Shared Components | 21/4/2026 | 17/6/2026 | Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Shared… | |
| Analizada | Media (5.4) | 0.17% | 💥 PoC | Oracle Peoplesoft Enterprise HCM Human Resources | 21/4/2026 | 17/6/2026 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Employee Snapshot). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human… | |
| Aplazada | Media (4.3) | 0.26% | — | Mage-people BUS Ticket Booking With Seat ReservationAI | 8/4/2026 | 24/7/2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through < 5.6.5. | |
| Aplazada | Media (4.3) | 0.23% | — | Magepeopleteam Wptravelly Tour-booking-managerAI | 8/4/2026 | 20/7/2026 | Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through <= 2.1.7. | |
| Aplazada | Media (6.5) | 0.33% | — | Codepeople Contact Form EmailAI | 25/3/2026 | 17/6/2026 | Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through <= 1.3.63. | |
| Aplazada | Crítica (9.8) | 0.56% | — | Mage-people BUS Ticket Booking With Seat ReservationAI | 25/3/2026 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Object Injection.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through <= 5.6.0. | |
| Aplazada | Media (6.5) | 0.22% | — | Codepeople CP Multi View Event CalendarAI | 25/3/2026 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Stored XSS.This issue affects CP Multi View Event Calendar : from n/a through <= 1.4.36. | |
| Aplazada | Alta (7.1) | 0.18% | — | Magepeopleteam WpeventlyAI | 25/3/2026 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam WpEvently mage-eventpress allows Reflected XSS.This issue affects WpEvently: from n/a through <= 5.1.4. | |
| Aplazada | Media (6.5) | 0.30% | — | Magepeopleteam Booking AND Rental Manager FOR WoocommerceAI | 25/3/2026 | 17/6/2026 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.6.0. | |
| Aplazada | Alta (8.5) | 0.36% | — | Codepeople CP Contact Form With PaypalAI | 13/3/2026 | 17/6/2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople CP Contact Form with Paypal cp-contact-form-with-paypal allows Blind SQL Injection.This issue affects CP Contact Form with Paypal: from n/a through <= 1.3.61. | |
| Aplazada | Media (5.3) | 0.29% | — | Codepeople WP Time Slots Booking FormAI | 13/3/2026 | 17/6/2026 | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.42. | |
| Aplazada | Alta (7.5) | 0.51% | — | Magepeopleteam WpbookinglyAI | 13/3/2026 | 17/6/2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpBookingly service-booking-manager allows PHP Local File Inclusion.This issue affects WpBookingly: from n/a through <= 1.2.9. | |
| Aplazada | Media (5.3) | 0.33% | — | Magepeopleteam WpeventlyAIMagepeopleteam Mage-eventpressAI | 13/3/2026 | 17/6/2026 | Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: from n/a through < 5.1.9. | |
| Aplazada | Alta (8.8) | 0.36% | — | Magepeopleteam Booking AND Rental Manager FOR WoocommerceAI | 20/2/2026 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.9. | |
| Aplazada | Media (6.5) | 0.26% | — | Codepeople Calculated Fields FormAI | 19/2/2026 | 17/6/2026 | Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculated Fields Form: from n/a through <= 5.4.4.1. | |
| Aplazada | Crítica (9.8) | 0.39% | — | Magepeopleteam WpeventlyAI | 19/2/2026 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.1.1. | |
| Aplazada | Alta (8.8) | 0.42% | — | Magepeopleteam WpeventlyAI | 3/2/2026 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.0.8. | |
| Aplazada | Media (4.3) | 0.13% | — | Magepeopleteam WpeventlyAIMagepeopleteam Mage-eventpressAI | 3/2/2026 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: from n/a through <= 5.1.1. | |
| Analizada | Media (5.4) | 0.19% | — | Oracle Peoplesoft Supply Chain Management Purchasing | 20/1/2026 | 17/6/2026 | Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing. Successful… |