Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2570▼ 329 respecto a la semana anterior
Críticas / altas1353▲ 95 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
162 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Alta (7.1) | 0.28% | — | Oracle US Federal Human ResourcesAI | 15/9/2026 | 21/9/2026 | Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle US Federal Human… | |
| Aplazada | Alta (7) | 0.18% | — | Opentelemetry Resources HostAI | 8/9/2026 | 10/9/2026 | `OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the `host.id` resource attribute detector launches the `sh` and `ioreg` executables by bare name rather than by… | |
| Analizada | Alta (7.2) | 0.49% | — | Oracle Human Resources Management System | 18/8/2026 | 25/8/2026 | Vulnerability in the Oracle HRMS (Netherlands) product of Oracle E-Business Suite (component: Netherlands Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS (Netherlands). Successful… | |
| Analizada | Alta (7.8) | 0.16% | — | Oracle Human Resources Management System | 18/8/2026 | 25/8/2026 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Tax Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS (US) executes to compromise Oracle… | |
| Analizada | Alta (7.7) | 0.33% | — | Oracle Public Sector Human Resources | 18/8/2026 | 28/8/2026 | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Public Sector Human… | |
| Analizada | Alta (8) | 0.38% | — | Oracle Public Sector Human Resources | 18/8/2026 | 28/8/2026 | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Public Sector Human… | |
| Analizada | Alta (8) | 0.38% | — | Oracle Human Resources Management System | 18/8/2026 | 3/9/2026 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS (US). While the vulnerability is… | |
| Aplazada | Crítica (9.8) | 0.29% | — | Bilin Software AND Informatics Consultancy INC Humanist Digital Human ResourcesAI | 4/8/2026 | 26/8/2026 | Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. | |
| Aplazada | Alta (7.4) | 0.34% | — | Bilin Software AND Informatics Consultancy INC Humanist Digital Human ResourcesAI | 4/8/2026 | 26/8/2026 | Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. | |
| Aplazada | Crítica (9.1) | 0.40% | — | Bilin Software AND Informatics Consultancy INC Humanist Digital Human ResourcesAI | 4/8/2026 | 26/8/2026 | Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Read Sensitive Constants Within an Executable. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. | |
| Aplazada | Media (6.5) | 0.35% | — | Bilin Software AND Informatics Consultancy INC Humanist Digital Human ResourcesAI | 4/8/2026 | 26/8/2026 | Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay). This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. | |
| Aplazada | Media (5.4) | 0.21% | — | Bilin Software AND Informatics Consultancy INC Humanist Digital Human ResourcesAI | 4/8/2026 | 26/8/2026 | URL redirection to untrusted site ('open redirect') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phishing. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. | |
| Aplazada | Media (5.3) | 0.33% | — | Bilin Software AND Informatics Consultancy INC Humanist Digital Human ResourcesAI | 4/8/2026 | 26/8/2026 | Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Account Footprinting. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. | |
| Aplazada | Media (6.5) | 0.44% | — | Bilin Software AND Informatics Consultancy INC Humanist Digital Human ResourcesAI | 4/8/2026 | 26/8/2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. | |
| Aplazada | Media (5.4) | 0.23% | — | Bilin Software AND Informatics Consultancy INC Humanist Digital Human ResourcesAI | 4/8/2026 | 26/8/2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Stored XSS. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. | |
| Aplazada | Crítica (9.8) | 0.52% | — | Bilin Software AND Informatics Consultancy INC Humanist Digital Human ResourcesAI | 4/8/2026 | 26/8/2026 | Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. | |
| Analizada | Alta (7.7) | 0.35% | — | Oracle Human Resources Management System | 21/7/2026 | 27/7/2026 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). While the vulnerability is in Oracle… | |
| Analizada | Alta (7.1) | 0.30% | — | Oracle Human Resources Management System | 21/7/2026 | 27/7/2026 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (US). Successful attacks of this… | |
| Analizada | Media (6.5) | 0.35% | — | Oracle Human Resources Management System | 21/7/2026 | 27/7/2026 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (US). Successful attacks of this… | |
| Analizada | Alta (7.8) | 0.16% | — | Oracle Human Resources Management System | 21/7/2026 | 27/7/2026 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS (US) executes to compromise Oracle HRMS… | |
| Analizada | Alta (7.7) | 0.35% | — | Oracle Human Resources Management System | 21/7/2026 | 27/7/2026 | Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (Norway). While the… | |
| Analizada | Media (6.8) | 0.40% | — | Oracle Human Resources Management System | 21/7/2026 | 27/7/2026 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS (US). While the vulnerability is in… | |
| Analizada | Alta (7.1) | 0.30% | — | Oracle Human Resources Management System | 21/7/2026 | 27/7/2026 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). Successful attacks of this… | |
| Analizada | Media (6.5) | 0.35% | — | Oracle Human Resources Management System | 21/7/2026 | 27/7/2026 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (US). Successful attacks of this… | |
| Analizada | Crítica (9.6) | 0.36% | — | Oracle Human Resources Management System | 21/7/2026 | 27/7/2026 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). While the vulnerability is in Oracle… |