Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2882▼ 181 respecto a la semana anterior

Críticas / altas1279▼ 60 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-62137	Aplazada	Media (6.5)	0.17%	—	Shuttlethemes Shuttle^AI	31/12/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shuttlethemes Shuttle shuttle allows Stored XSS.This issue affects Shuttle: from n/a through <= 1.5.0.
CVE-2023-48830	Modificada	Alta (8.8)	1.2%	—	Phpjabbers Shuttle Booking Software	7/12/2023	17/6/2026	Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export.
CVE-2023-48172	Modificada	Media (5.4)	0.72%	—	Phpjabbers Shuttle Booking Software	7/12/2023	17/6/2026	A Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php.
CVE-2023-4112	Modificada	Media (6.1)	8.4%	—	Phpjabbers Shuttle Booking Software	3/8/2023	17/6/2026	A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is…
CVE-2014-7787	Modificada	Media (5.4)	0.27%	—	Synapse Ishuttle	21/10/2014	17/6/2026	The iShuttle (aka com.synapse.ishuttle_user) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.