Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2517▼ 428 respecto a la semana anterior

Críticas / altas1288▲ 1 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 465 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-11963	Aplazada	Media (5.4)	0.17%	—	Saysis Starcities^AI	19/11/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities allows Reflected XSS. This issue affects StarCities: before 1.1.61.
CVE-2025-8664	Aplazada	Media (6.3)	0.25%	—	Saysis Computer Systems Trade Ltd. CO Starcities E-municipality Management^AI	19/9/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management allows Cross-Site Scripting (XSS). This issue affects StarCities E-Municipality Management: before 20250825.
CVE-2023-1246	Modificada	Alta (7.5)	0.60%	—	Saysis Starcities	10/3/2023	17/6/2026	Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations. This issue affects Starcities: through 1.3.
CVE-2023-1198	Modificada	Crítica (9.8)	0.66%	—	Saysis Starcities	10/3/2023	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities allows SQL Injection. This issue affects Starcities: through 1.3.
CVE-2022-2178	Modificada	Media (6.1)	0.38%	—	Saysis Starcities	6/3/2023	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saysis Computer Starcities allows Cross-Site Scripting (XSS). This issue affects Starcities: before 1.1.