Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2585▼ 302 respecto a la semana anterior
Críticas / altas1355▲ 99 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.2% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 12/9/2022 | 17/6/2026 | A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc. | |
| Modificada | Alta (7.5) | 1.0% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 12/9/2022 | 17/6/2026 | A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt". | |
| Modificada | Alta (7.5) | 1.0% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 12/9/2022 | 17/6/2026 | A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc. | |
| Modificada | Alta (7.5) | 1.0% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 12/9/2022 | 17/6/2026 | A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode". | |
| Modificada | Alta (7.5) | 1.0% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 12/9/2022 | 17/6/2026 | A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt". | |
| Modificada | Crítica (9.8) | 0.81% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 18/8/2022 | 17/6/2026 | A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.' | |
| Modificada | Crítica (9.8) | 0.83% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 18/8/2022 | 17/6/2026 | A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc. | |
| Modificada | Crítica (9.8) | 0.83% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 18/8/2022 | 17/6/2026 | A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt. | |
| Modificada | Crítica (9.8) | 0.91% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 18/8/2022 | 17/6/2026 | A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user. | |
| Modificada | Crítica (9.8) | 0.91% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 18/8/2022 | 17/6/2026 | A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt. | |
| Modificada | Crítica (9.8) | 0.91% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 18/8/2022 | 17/6/2026 | A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode. | |
| Modificada | Crítica (9.8) | 0.89% | — | Inventorymanagementsystem Project Inventorymanagementsystem | 18/8/2022 | 17/6/2026 | A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username. |