Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior

Críticas / altas1288▼ 199 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-36690	Modificada	Alta (8.8)	0.98%	—	Ingredient Stock Management System Project Ingredient Stock Management System	29/8/2022	17/6/2026	Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user&id=.
CVE-2022-36689	Modificada	Alta (8.8)	1.0%	—	Ingredient Stock Management System Project Ingredient Stock Management System	29/8/2022	17/6/2026	Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/waste&month=.
CVE-2022-36688	Modificada	Alta (8.8)	1.0%	—	Ingredient Stock Management System Project Ingredient Stock Management System	29/8/2022	17/6/2026	Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockout&month=.
CVE-2022-36687	Modificada	Media (6.5)	1.0%	—	Ingredient Stock Management System Project Ingredient Stock Management System	29/8/2022	17/6/2026	Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.
CVE-2022-36686	Modificada	Alta (8.8)	1.0%	—	Ingredient Stock Management System Project Ingredient Stock Management System	29/8/2022	17/6/2026	Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockin&month=.
CVE-2022-32311	Modificada	Crítica (9.8)	1.5%	—	Ingredient Stock Management System Project Ingredient Stock Management System	5/7/2022	17/6/2026	Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/view_stock.php.
CVE-2022-32310	Modificada	Crítica (9.8)	1.7%	—	Ingredient Stock Management System Project Ingredient Stock Management System	5/7/2022	17/6/2026	An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php.