Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-36938	Aplazada	Baja (2.7)	0.31%	—	Sourcecodester Online Resort Management System^AI	13/4/2026	17/6/2026	Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.
CVE-2026-36937	Aplazada	Baja (2.7)	0.31%	—	Sourcecodester Online Resort Management System^AI	13/4/2026	17/6/2026	Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_details.php.
CVE-2026-36942	Aplazada	Baja (2.7)	0.31%	—	Sourcecodester Online Resort Management System^AI	13/4/2026	17/6/2026	Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php.
CVE-2026-36941	Aplazada	Baja (2.7)	0.31%	—	Sourcecodester Online Resort Management System^AI	13/4/2026	17/6/2026	Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_room.php.
CVE-2021-46201	Modificada	Crítica (9.8)	1.6%	—	Online Resort Management System Project Online Resort Management System	21/1/2022	17/6/2026	An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node.