Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.5) | 0.41% | — | Shenzhen Sixun Software Sixun Shanghui Group Business Management SystemAI | 26/5/2026 | 23/7/2026 | A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10. Affected by this vulnerability is an unknown functionality of the file /api/Dinner/PayConfig. Performing a manipulation of the argument tableno results in sql injection. The attack is possible to be carried out… | |
| Aplazada | Baja (2.9) | 0.32% | — | Shenzhen Sixun Software Sixun Shanghui Group Business Management SystemAI | 15/12/2025 | 17/6/2026 | A security flaw has been discovered in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Affected by this issue is some unknown functionality of the file /ExportFiles/. The manipulation results in files or directories accessible. The attack may be launched remotely. This attack is… | |
| Aplazada | Media (5.5) | 0.33% | — | Shenzhen Sixun Software Sixun Shanghui Group Business Management SystemAI | 15/12/2025 | 30/9/2026 | A vulnerability was identified in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Affected by this vulnerability is an unknown functionality of the file /api/GylOperator/UpdatePasswordBatch. The manipulation leads to weak password recovery. The attack may be initiated remotely. The… | |
| Aplazada | Media (5.5) | 0.36% | — | Shenzhen Sixun Business Management SystemAI | 13/9/2025 | 17/6/2026 | A security flaw has been discovered in Shenzhen Sixun Business Management System 7/11. This affects an unknown part of the file /Adm/OperatorStop. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be… | |
| Aplazada | Media (5.3) | 0.33% | — | Shenzhen Sixun Software Sixun Shanghui Group Business Management SystemAI | 5/5/2025 | 17/6/2026 | A vulnerability, which was classified as problematic, was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This affects an unknown part of the file /api/GylOperator/LoadData. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit… | |
| Aplazada | Media (6.3) | 0.62% | — | Shenzhen Sixun Software Sixun Shanghui Group Business Management SystemAI | 9/3/2025 | 17/6/2026 | A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This issue affects some unknown processing of the file /WebPages/Adm/OperatorStop.asp of the component Reset Password Interface. The manipulation of the argument OperId… | |
| Modificada | Media (5.4) | 0.48% | — | Business Management System Project Business Management System | 24/2/2023 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to v2.0.1. |