Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.3) | 0.86% | — | Wellchoose Organization Portal System | 11/3/2026 | 17/6/2026 | IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server. | |
| Analizada | Media (5.1) | 0.32% | — | Wellchoose Organization Portal System | 11/3/2026 | 17/6/2026 | IFTOP developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks. | |
| Analizada | Media (5.1) | 0.33% | — | Wellchoose Organization Portal System | 11/3/2026 | 17/6/2026 | IFTOP developed by WellChoose has an Open redirect vulnerability, allowing authenticated remote attackers to craft a URL that tricks users into visiting malicious website. | |
| Analizada | Alta (7.1) | 0.39% | — | Wellchoose Organization Portal System | 13/8/2025 | 17/6/2026 | Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents. | |
| Analizada | Crítica (9.3) | 0.63% | — | Wellchoose Organization Portal System | 13/8/2025 | 17/6/2026 | Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server. | |
| Analizada | Alta (8.7) | 0.58% | — | Wellchoose Organization Portal System | 13/8/2025 | 17/6/2026 | Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files. | |
| Analizada | Media (5.3) | 0.35% | — | Wellchoose Organization Portal System | 13/8/2025 | 17/6/2026 | Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks. | |
| Analizada | Media (5.3) | 0.35% | — | Wellchoose Organization Portal System | 13/8/2025 | 17/6/2026 | Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks. | |
| Analizada | Alta (7.1) | 0.65% | — | Wellchoose Organization Portal System | 13/8/2025 | 17/6/2026 | Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files. |