Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-25776	Analizada	Media (5)	0.26%	—	Codeastro BUS Ticket Booking System	28/4/2025	17/6/2026	Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attacker to execute arbitrary code into the Full Name and Address fields during user registration or profile editing.
CVE-2025-25775	Analizada	Crítica (9.8)	0.54%	—	Codeastro BUS Ticket Booking System	25/4/2025	17/6/2026	Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder.
CVE-2025-25777	Analizada	Alta (8)	0.27%	—	Codeastro BUS Ticket Booking System	24/4/2025	17/6/2026	Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.
CVE-2022-30817	Modificada	Crítica (9.8)	1.1%	—	Simple BUS Ticket Booking System Project Simple BUS Ticket Booking System	2/6/2022	17/6/2026	Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php.
CVE-2022-29317	Modificada	Crítica (9.8)	0.94%	—	Simple BUS Ticket Booking System Project Simple BUS Ticket Booking System	11/5/2022	17/6/2026	Simple Bus Ticket Booking System v1.0 was discovered to contain multiple SQL injection vulnerbilities via the username and password parameters at /assets/partials/_handleLogin.php.