Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.41% | 💥 PoC | Oretnom23 Toll TAX Management System | 8/11/2024 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field. | |
| Modificada | Alta (7.2) | 0.80% | — | Oretnom23 Toll TAX Management System | 27/9/2023 | 17/6/2026 | Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection. | |
| Modificada | Media (6.1) | 0.80% | 💥 PoC | Oretnom23 Toll TAX Management System | 4/8/2023 | 9/7/2026 | Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page. | |
| Modificada | Media (5.4) | 0.54% | — | Oretnom23 Toll TAX Management System | 24/5/2022 | 17/6/2026 | Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes/Master.php?f=save_recipient, vehicle_name. | |
| Modificada | Crítica (9.8) | 1.2% | — | Oretnom23 Toll TAX Management System | 17/5/2022 | 17/6/2026 | In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks. |