Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
23 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.5) | 0.43% | — | Codeastro Apartment Visitor Management SystemAI | 20/8/2026 | 24/8/2026 | A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly… | |
| Aplazada | Media (5.5) | 0.43% | — | Codeastro Apartment Visitor Management SystemAI | 20/8/2026 | 25/8/2026 | A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and… | |
| Aplazada | Baja (2.1) | 0.33% | — | Codeastro Apartment Visitor Management SystemAI | 6/7/2026 | 7/7/2026 | A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /apartment-visitor/visitor-entry.php. The manipulation of the argument visname leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and… | |
| Aplazada | Baja (2.1) | 0.33% | — | Codeastro Apartment Visitor Management SystemAI | 6/7/2026 | 6/7/2026 | A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. This vulnerability affects unknown code of the file /apartment-visitor/edit-apartment.php. Executing a manipulation of the argument editid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been… | |
| Aplazada | Baja (2.1) | 0.33% | — | Codeastro Apartment Visitor Management SystemAI | 6/7/2026 | 6/7/2026 | A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could… | |
| Aplazada | Baja (2.1) | 0.33% | — | Codeastro Apartment Visitor Management SystemAI | 6/7/2026 | 6/7/2026 | A vulnerability has been found in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /apartment-visitor/action-visitor.php. Such manipulation of the argument remark leads to sql injection. The attack may be performed from remote. The exploit has been… | |
| Aplazada | Baja (2.1) | 0.33% | — | Codeastro Apartment Visitor Management SystemAI | 5/7/2026 | 6/7/2026 | A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /apartment-visitor/search-result.php of the component POST Parameter Handler. The manipulation of the argument searchdata leads to sql injection. Remote exploitation of… | |
| Aplazada | Baja (2.1) | 0.33% | — | Codeastro Apartment Visitor Management SystemAI | 5/7/2026 | 7/7/2026 | A security flaw has been discovered in CodeAstro Apartment Visitor Management System 1.0. The impacted element is an unknown function of the file /apartment-visitor/add-apartment.php. The manipulation of the argument apartmentno results in sql injection. The attack may be launched remotely. The exploit has been… | |
| Aplazada | Media (5.5) | 0.43% | — | Codeastro Apartment Visitor Management SystemAI | 4/7/2026 | 6/7/2026 | A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and… | |
| Modificada | Media (5.5) | 0.42% | — | Campcodes Online Apartment Visitor Management System | 11/10/2025 | 17/6/2026 | A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /forgot-password.php. This manipulation of the argument email causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public… | |
| Modificada | Baja (2) | 0.42% | — | Campcodes Online Apartment Visitor Management System | 11/10/2025 | 17/6/2026 | A vulnerability was found in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /admin-profile.php. Performing a manipulation of the argument mobilenumber results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and… | |
| Modificada | Media (5.5) | 0.42% | — | Campcodes Online Apartment Visitor Management System | 7/10/2025 | 17/6/2026 | A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. The affected element is an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate results in sql injection. The attack may be launched remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Apartment Visitor Management System | 7/10/2025 | 17/6/2026 | A vulnerability was identified in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /search-visitor.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. | |
| Modificada | Media (5.5) | 0.42% | — | Campcodes Online Apartment Visitor Management System | 7/10/2025 | 17/6/2026 | A vulnerability was determined in Campcodes Online Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /index.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and… | |
| Modificada | Media (5.5) | 0.42% | — | Campcodes Online Apartment Visitor Management System | 6/10/2025 | 17/6/2026 | A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be… | |
| Analizada | Media (6.9) | 0.58% | — | Oretnom23 Apartment Visitor Management System | 19/5/2025 | 17/6/2026 | A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The… | |
| Analizada | Media (6.9) | 0.59% | — | Oretnom23 Apartment Visitor Management System | 9/5/2025 | 17/6/2026 | A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been… | |
| Analizada | Media (6.9) | 0.56% | — | Oretnom23 Apartment Visitor Management System | 6/4/2025 | 17/6/2026 | A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit… | |
| Analizada | Media (6.9) | 0.56% | — | Oretnom23 Apartment Visitor Management System | 6/4/2025 | 17/6/2026 | A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forgotpw.php. The manipulation of the argument secode leads to sql injection. The attack can be launched remotely. The exploit has… | |
| Analizada | Media (5.3) | 0.54% | — | Oretnom23 Apartment Visitor Management System | 3/4/2025 | 17/6/2026 | A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-entry.php. The manipulation of the argument visname/address leads to sql injection. It is possible to launch the attack remotely. The exploit has been… | |
| Analizada | Media (5.3) | 0.53% | — | Oretnom23 Apartment Visitor Management System | 3/4/2025 | 17/6/2026 | A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument buildingno leads to sql injection. The attack may be initiated remotely. The exploit has been… | |
| Analizada | Media (5.3) | 0.57% | — | Oretnom23 Apartment Visitor Management System | 1/4/2025 | 17/6/2026 | A vulnerability, which was classified as critical, was found in oretnom23/SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /remove-apartment.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has… | |
| Modificada | Alta (7.2) | 0.88% | — | Apartment Visitor Management System Project Apartment Visitor Management System | 8/9/2022 | 17/6/2026 | Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apartment.php. |