Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-44755	Analizada	Crítica (9.8)	0.54%	—	Mayurik Sacco Management System	22/4/2025	17/6/2026	Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php.
CVE-2022-42218	Modificada	Alta (7.2)	0.78%	—	Open Source Sacco Management System Project Open Source Sacco Management System	18/10/2022	17/6/2026	Open Source SACCO Management System v1.0 vulnerable to SQL Injection via /sacco_shield/manage_loan.php.
CVE-2022-42143	Modificada	Alta (7.2)	0.88%	—	Open Source Sacco Management System Project Open Source Sacco Management System	17/10/2022	17/6/2026	Open Source SACCO Management System v1.0 is vulnerable to SQL Injection via /sacco_shield/manage_payment.php.
CVE-2022-41536	Modificada	Alta (7.2)	0.78%	—	Open Source Sacco Management System Project Open Source Sacco Management System	14/10/2022	17/6/2026	Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_user.php.
CVE-2022-41535	Modificada	Alta (7.2)	0.78%	—	Open Source Sacco Management System Project Open Source Sacco Management System	14/10/2022	17/6/2026	Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_borrower.php.
CVE-2022-41532	Modificada	Alta (7.2)	0.90%	—	Open Source Sacco Management System Project Open Source Sacco Management System	12/10/2022	17/6/2026	Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_plan.
CVE-2022-41530	Modificada	Alta (7.2)	0.90%	—	Open Source Sacco Management System Project Open Source Sacco Management System	12/10/2022	17/6/2026	Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_borrower.
CVE-2022-41515	Modificada	Alta (7.2)	0.87%	—	Open Source Sacco Management System Project Open Source Sacco Management System	7/10/2022	17/6/2026	Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_payment.
CVE-2022-41514	Modificada	Alta (7.2)	0.87%	—	Open Source Sacco Management System Project Open Source Sacco Management System	7/10/2022	17/6/2026	Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_loan.