Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2780▲ 24 respecto a la semana anterior
Críticas / altas1288▼ 240 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)242▲ 224 respecto a la semana anterior
119 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.1) | 0.22% | — | Webfulcreations RepairbuddyAI | 5/10/2026 | 6/10/2026 | Vulnerabilidad de ausencia de autorización en Webful Creations RepairBuddy computer-repair-shop que permite recuperar datos confidenciales incrustados. Este problema afecta a RepairBuddy: desde n/a hasta 4.1226. | |
| Aplazada | Media (6.5) | 0.17% | — | Webfulcreations RepairbuddyAI | 5/10/2026 | 6/10/2026 | Vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('secuencias de comandos en sitios cruzados') en Webful Creations RepairBuddy computer-repair-shop que permite XSS almacenado. Este problema afecta a RepairBuddy: desde n/a hasta 4.1225. | |
| Pendiente de análisis | Alta (8.8) | 0.42% | — | Oracle E-business SuiteAIOracle Complex Maintenance Repair AND OverhaulAI | 15/9/2026 | 17/9/2026 | Vulnerabilidad en el producto Oracle Complex Maintenance, Repair and Overhaul de Oracle E-Business Suite (componente: Internal Operations). Las versiones compatibles afectadas son 12.2.3-12.2.15. Una vulnerabilidad fácilmente explotable permite a un atacante con privilegios bajos con acceso a la red a través de HTTPS… | |
| Aplazada | Alta (8.8) | 0.42% | — | Oracle E-business SuiteAIOracle Depot RepairAI | 15/9/2026 | 17/9/2026 | Vulnerabilidad en el producto Oracle Depot Repair de Oracle E-Business Suite (componente: Internal Operations). Las versiones compatibles afectadas son 12.2.10-12.2.15. Una vulnerabilidad fácilmente explotable permite a un atacante con privilegios bajos con acceso a la red a través de HTTP comprometer Oracle Depot… | |
| Aplazada | Alta (7.2) | 0.46% | — | Oracle E-business SuiteAIOracle Depot RepairAI | 15/9/2026 | 17/9/2026 | Vulnerabilidad en el producto Oracle Depot Repair de Oracle E-Business Suite (componente: Internal Operations). Las versiones compatibles afectadas son 12.2.3-12.2.15. Una vulnerabilidad fácilmente explotable permite a un atacante con privilegios elevados con acceso a la red a través de HTTP comprometer Oracle Depot… | |
| Pendiente de análisis | Alta (8.5) | 0.40% | — | Oracle E-business SuiteAIOracle Complex Maintenance Repair AND OverhaulAI | 15/9/2026 | 22/9/2026 | Vulnerabilidad en el producto Oracle Complex Maintenance, Repair and Overhaul de Oracle E-Business Suite (componente: Internal Operations). Las versiones compatibles afectadas son 12.2.12-12.2.15. Una vulnerabilidad fácilmente explotable permite a un atacante con privilegios bajos y acceso a la red a través de HTTP… | |
| Aplazada | Alta (7.8) | 0.84% | — | Tubitak Bilgem Pardus Boot RepairAI | 11/9/2026 | 11/9/2026 | Vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comandos del sistema operativo') en TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair que permite la inyección de comandos del sistema operativo. Este problema… | |
| Aplazada | Alta (7.5) | 0.58% | — | RepairbuddyAI | 10/9/2026 | 10/9/2026 | Ejecución remota de código (RCE) por parte de suscriptores en las versiones de RepairBuddy <= 4.1224. | |
| Analizada | Alta (8) | 0.59% | — | Microsoft VM Repair | 8/9/2026 | 14/9/2026 | Una neutralización incorrecta de elementos especiales usados en un comando ('inyección de comandos') en Microsoft Azure CLI permite a un atacante autorizado ejecutar código a través de una red. | |
| Aplazada | Alta (7.8) | 0.49% | — | Tubitak Bilgem Pardus Boot RepairAI | 31/8/2026 | 1/9/2026 | Vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comandos del sistema operativo') en TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair que permite la inyección de comandos del sistema operativo. Este problema… | |
| Aplazada | Media (5.3) | 0.29% | — | RepairbuddyAI | 24/8/2026 | 24/8/2026 | Control de acceso defectuoso sin autenticación en RepairBuddy, versiones <= 4.1223. | |
| Analizada | Alta (7.2) | 0.49% | — | Oracle Complex Maintenance Repair AND Overhaul | 18/8/2026 | 27/8/2026 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Call Center Technology.… | |
| Analizada | Alta (7.1) | 0.29% | — | Oracle Complex Maintenance Repair AND Overhaul | 18/8/2026 | 31/8/2026 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Production). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex… | |
| Aplazada | Media (5.5) | 0.43% | — | Sourcecodester Computer Repair Shop Management SystemAI | 6/8/2026 | 12/8/2026 | A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=delete_product. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The… | |
| Analizada | Alta (7.5) | 0.28% | — | Oracle Complex Maintenance Repair AND Overhaul | 21/7/2026 | 19/8/2026 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex… | |
| Analizada | Media (5.4) | 0.23% | — | Oracle Complex Maintenance Repair AND Overhaul | 21/7/2026 | 3/8/2026 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Common Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex… | |
| Aplazada | Alta (7.1) | 0.24% | — | Auto RepairAI | 17/6/2026 | 17/6/2026 | Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions. | |
| Analizada | Alta (7.5) | 0.33% | — | Oracle Complex Maintenance Repair AND Overhaul | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex… | |
| Analizada | Alta (7.5) | 0.33% | — | Oracle Complex Maintenance Repair AND Overhaul | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex… | |
| Analizada | Alta (8.5) | 0.33% | — | Oracle Complex Maintenance Repair AND Overhaul | 17/6/2026 | 18/6/2026 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Production). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex… | |
| Aplazada | Media (6.5) | 0.34% | — | RepairbuddyAI | 15/6/2026 | 17/6/2026 | Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions. | |
| Aplazada | Media (5.5) | 0.27% | — | Sourcecodester Computer Repair Shop Management SystemAI | 1/6/2026 | 22/7/2026 | Se encontró una vulnerabilidad en SourceCodester Computer Repair Shop Management System hasta 1.0. Afectada es una función desconocida del archivo /admin/products/manage_product.PHP. La manipulación del argumento ID resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y… | |
| Aplazada | Media (4.3) | 0.22% | — | Webfulcreations RepairbuddyAI | 26/5/2026 | 24/7/2026 | Vulnerabilidad de Autorización Faltante en Webful Creations RepairBuddy permite explotar Niveles de Seguridad de Control de Acceso mal configurados. Este problema afecta a RepairBuddy: desde n/a hasta 4.1121. | |
| Aplazada | Baja (2.7) | 0.31% | — | Sourcecodester Computer AND Mobile Repair Shop Management SystemAI | 13/4/2026 | 17/6/2026 | Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manage_client.php | |
| Aplazada | Baja (2.7) | 0.31% | — | Sourcecodester Computer AND Mobile Repair Shop Management SystemAI | 13/4/2026 | 17/6/2026 | Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/view_details.php. |