Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2543▼ 416 respecto a la semana anterior

Críticas / altas1316▲ 27 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)59▼ 467 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-105069	Recibida	Media (6.5)	—	—	Nikki Blight QR Redirector^AI	5/10/2026	5/10/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikki Blight QR Redirector qr-redirector allows Stored XSS.This issue affects QR Redirector: from n/a through 2.0.5.
CVE-2026-24545	Aplazada	Media (4.3)	0.20%	—	Nikki Blight QR Redirector^AI	25/5/2026	24/7/2026	Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n/a through 2.0.3.
CVE-2011-4001	Modificada	Alta (7.5)	1.5%	—	Mawashimono Nikki	1/12/2011	16/6/2026	Directory traversal vulnerability in HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to read and modify arbitrary files via unspecified vectors.
CVE-2011-4002	Modificada	Alta (7.5)	2.1%	—	Mawashimono Nikki	30/11/2011	16/6/2026	HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."
CVE-2006-5774	Modificada	Media (4.3)	1.3%	—	Hyper Nikki System	6/11/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in Hyper NIKKI System before 2.19.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2005-3932	Modificada	Alta (7.5)	1.2%	—	O-kiraku Nikki	1/12/2005	16/6/2026	SQL injection vulnerability in okiraku.php in O-Kiraku Nikki 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the day_id parameter.