Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 3.1% | 💥 Exploit | Notrinoserp | 23/3/2023 | 17/6/2026 | NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php. | |
| Modificada | Media (4.3) | 0.72% | — | Notrinoserp | 23/8/2022 | 17/6/2026 | Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7. | |
| Modificada | Crítica (9.8) | 0.91% | — | Notrinoserp | 22/8/2022 | 17/6/2026 | Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7. | |
| Modificada | Alta (8.8) | 1.3% | — | Notrinoserp | 21/8/2022 | 17/6/2026 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update languages,… | |
| Modificada | Media (5.4) | 0.65% | — | Notrinoserp | 17/8/2022 | 17/6/2026 | Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7. |