Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.43% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in SQL injection. | |
| Analizada | Crítica (9.8) | 0.56% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the argument id can result in improper authorization. | |
| Analizada | Media (6.1) | 0.32% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.php?f=save. Manipulating the parameter middlename results in cross-site scripting. | |
| Analizada | Media (5.4) | 0.26% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/SystemSettings.php?f=update_settings. Manipulating the parameter name results in cross-site scripting. | |
| Analizada | Crítica (9.8) | 0.53% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/view_borrow. Manipulating the argument id can result in SQL injection. | |
| Modificada | Crítica (9.8) | 0.54% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/view_category.php. Manipulating the argument id can result in SQL injection. | |
| Analizada | Media (6.5) | 0.41% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_category. Manipulating the argument id can result in SQL injection. | |
| Analizada | Media (5.3) | 0.24% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_item. Manipulating the argument id can result in SQL injection. | |
| Analizada | Media (6.3) | 0.37% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_item. Manipulating the argument id can result in SQL injection. | |
| Analizada | Crítica (9.8) | 0.65% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_category. Manipulating the argument id can result in SQL injection. | |
| Analizada | Crítica (9.8) | 0.65% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_category. Manipulating the argument id can result in SQL injection. | |
| Analizada | Media (5.4) | 0.36% | — | Dino Physics School Assistant Project Dino Physics School Assistant | 30/5/2024 | 17/6/2026 | A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts unidentified code within the file /classes/Users.php. Manipulating the argument id results in cross-site scripting. |