Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2989▼ 87 respecto a la semana anterior
Críticas / altas1458▲ 97 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.2) | 1.0% | — | Simple Exam Reviewer Management System Project Simple Exam Reviewer Management System | 20/10/2022 | 17/6/2026 | Simple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload. | |
| Modificada | Media (5.4) | 0.50% | — | Simple Exam Reviewer Management System Project Simple Exam Reviewer Management System | 20/10/2022 | 17/6/2026 | Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting (XSS) via the Exam List. | |
| Modificada | Alta (8.8) | 0.51% | — | Simple Exam Reviewer Management System Project Simple Exam Reviewer Management System | 20/10/2022 | 17/6/2026 | Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Exam List. | |
| Modificada | Alta (8.8) | 1.0% | — | Simple Exam Reviewer Management System Project Simple Exam Reviewer Management System | 20/10/2022 | 17/6/2026 | In Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file upload. | |
| Modificada | Media (6.5) | 0.62% | — | Simple Exam Reviewer Management System Project Simple Exam Reviewer Management System | 20/10/2022 | 17/6/2026 | In Simple Exam Reviewer Management System v1.0 the User List function has improper access control that allows low privileged users to modify user permissions to higher privileges. | |
| Modificada | Alta (8.8) | 23% | — | Exam Reviewer Management System Project Exam Reviewer Management System | 27/9/2022 | 17/6/2026 | In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution (RCE). | |
| Modificada | Crítica (9.8) | 1.3% | — | Exam Reviewer Management System Project Exam Reviewer Management System | 27/9/2022 | 17/6/2026 | Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter. |