Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3020▼ 63 respecto a la semana anterior
Críticas / altas1413▲ 57 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
–

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (8.8)0.95%—Employee Performance Evaluation System Project Employee Performance Evaluation System14/4/202317/6/2026
Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server.
ModificadaMedia (4.8)0.45%—Employee Performance Evaluation System Project Employee Performance Evaluation System19/12/20229/7/2026
Employee Performance Evaluation System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via adding new entries under the Departments and Designations module.
ModificadaCrítica (9.8)1.3%—Employee Performance Evaluation Project Employee Performance Evaluation5/4/202217/6/2026
Employee Performance Evaluation v1.0 was discovered to contain a SQL injection vulnerability via the email parameter.
ModificadaMedia (4.8)0.59%—Employee Performance Evaluation System Project Employee Performance Evaluation System20/1/202117/6/2026
Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting (XSS) in the Admin Portal in the Task and Description fields.
ModificadaMedia (4.8)0.55%—Employee Performance Evaluation System Project Employee Performance Evaluation System20/1/202117/6/2026
Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting (XSS) in the Employees, First Name and Last Name fields.