Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-37602	Aplazada	Baja (2.7)	0.31%	—	Sourcecodester Patient Appointment Scheduler System^AI	14/4/2026	17/6/2026	SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/user/manage_user.php.
CVE-2026-37601	Aplazada	Baja (2.7)	0.31%	—	Sourcecodester Patient Appointment Scheduler System^AI	14/4/2026	17/6/2026	SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manage_appointment.php.
CVE-2026-37598	Aplazada	Baja (2.7)	0.39%	—	Sourcecodester Patient Appointment Scheduler System^AI	14/4/2026	17/6/2026	SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to arbitrary code execution (RCE) via /scheduler/classes/SystemSettings.php?f=update_settings.
CVE-2021-41660	Modificada	Crítica (9.8)	1.3%	—	Patient Appointment Scheduler System Project Patient Appointment Scheduler System	24/1/2022	17/6/2026	SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php.