Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.4) | 0.54% | — | Remyandrade Daily Habit Tracker | 1/3/2024 | 17/6/2026 | A vulnerability was found in SourceCodester Daily Habit Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/update-tracker.php. The manipulation of the argument day leads to cross site scripting. The attack can be launched remotely. The… | |
| Modificada | Crítica (9.8) | 20% | 💥 Exploit | Remyandrade Daily Habit Tracker | 8/2/2024 | 17/6/2026 | An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components. | |
| Modificada | Crítica (9.8) | 1.3% | 💥 Exploit | Remyandrade Daily Habit Tracker | 8/2/2024 | 17/6/2026 | SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request. | |
| Modificada | Media (6.1) | 26% | 💥 Exploit | Remyandrade Daily Habit Tracker | 8/2/2024 | 17/6/2026 | Cross Site Scripting vulnerability in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via the day, exercise, pray, read_book, vitamins, laundry, alcohol and meat parameters in the add-tracker.php and update-tracker.php components. | |
| Modificada | Alta (7.2) | 1.2% | 💥 PoC | Remyandrade Daily Habit Tracker | 29/1/2024 | 17/6/2026 | Sourcecodester Daily Habit Tracker App 1.0 allows SQL Injection via the parameter 'tracker.' |