Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-17995	Modificada	Media (5.4)	0.54%	—	Iwcnetwork Biometric Shift Employee Management System	30/12/2017	17/6/2026	Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request.
CVE-2017-17994	Modificada	Media (5.4)	0.54%	—	Iwcnetwork Biometric Shift Employee Management System	30/12/2017	17/6/2026	Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request.
CVE-2017-17993	Modificada	Media (5.4)	0.54%	—	Iwcnetwork Biometric Shift Employee Management System	30/12/2017	17/6/2026	Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction request.
CVE-2017-17992	Modificada	Crítica (9.8)	1.8%	—	Iwcnetwork Biometric Shift Employee Management System	30/12/2017	17/6/2026	Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a download_form action.
CVE-2017-17991	Modificada	Media (5.4)	0.54%	—	Iwcnetwork Biometric Shift Employee Management System	30/12/2017	17/6/2026	Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request.
CVE-2017-17990	Modificada	Alta (8.8)	0.51%	—	Iwcnetwork Biometric Shift Employee Management System	30/12/2017	17/6/2026	Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
CVE-2017-17989	Modificada	Media (5.4)	0.54%	—	Iwcnetwork Biometric Shift Employee Management System	30/12/2017	17/6/2026	Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action.