Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2663▼ 380 respecto a la semana anterior

Críticas / altas1289▼ 36 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-7189	Aplazada	Alta (7.5)	0.42%	—	Proliz OBS^AI	17/7/2026	17/7/2026	Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd. Co. Proliz's OBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Proliz's OBS: before v3.6.0.
CVE-2025-14347	Aplazada	Media (6.3)	0.21%	—	Proliz Software LTD OBS Student Affairs Information System^AI	17/12/2025	28/9/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. OBS (Student Affairs Information System)0 allows Reflected XSS. This issue affects OBS (Student Affairs Information System)0: before 26.5009.
CVE-2025-11956	Aplazada	Alta (8.9)	0.25%	—	Proliz Software LTD OBS^AI	6/11/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS. This issue affects OBS (Student Affairs Information System): before 25.0401.
CVE-2025-10914	Aplazada	Alta (7.6)	0.26%	—	Proliz Software LTD OBS^AI	23/10/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Information System) allows Reflected XSS. This issue affects OBS (Student Affairs Information System): before V26.0401.
CVE-2025-10467	Aplazada	Alta (8.9)	0.27%	—	Proliz Computer Software Hardware Service Trade LTD OBS^AI	25/9/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS. This issue affects OBS (Student Affairs Information System): before v25.0401.
CVE-2025-0875	Aplazada	Media (6.5)	0.40%	—	Proliz Computer Software Hardware Service Trade LTD CO OBS^AI	22/9/2025	17/6/2026	Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Parameter Injection. This issue affects OBS (Student Affairs Information System): before v26.0328.
CVE-2024-8262	Modificada	Crítica (9.8)	0.60%	—	Prolizyazilim Student Affairs Information System	3/3/2025	17/6/2026	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Proliz Software OBS allows Path Traversal. This issue affects OBS: before 24.0927.
CVE-2024-8261	Modificada	Crítica (9.8)	0.42%	—	Prolizyazilim Student Affairs Information System	3/3/2025	17/6/2026	Authorization Bypass Through User-Controlled Key vulnerability in Proliz Software OBS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OBS: before 24.0927.
CVE-2023-1726	Modificada	Media (5.4)	0.34%	—	Prolizyazilim Student Affairs Information System	7/4/2023	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proliz OBS allows Stored XSS for an authenticated user. This issue affects OBS: before 23.04.01.