Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2565▼ 302 respecto a la semana anterior

Críticas / altas1351▲ 99 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-10244	Aplazada	Baja (2)	0.20%	—	Sourcecodestar Pharmacy Sales AND Inventory System^AI	1/6/2026	22/7/2026	A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is the function create_medicine_name of the file /ShowForm/create_medicine_name/main. Performing a manipulation of the argument medicine_name results in cross site scripting. The attack can be…
CVE-2022-29219	Modificada	Alta (7.5)	1.3%	—	Chainsafe Lodestar	24/5/2022	17/6/2026	Lodestar is a TypeScript implementation of the Ethereum Consensus specification. Prior to version 0.36.0, there is a possible consensus split given maliciously-crafted `AttesterSlashing` or `ProposerSlashing` being included on-chain. Because the developers represent `uint64` values as native javascript `number`s,…
CVE-2011-3584	Modificada	Crítica (9.8)	1.2%	—	Guidestar WEC Discussion Forum	26/11/2019	16/6/2026	The TYPO3 Core wec_discussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input.
CVE-2008-6539	Modificada	Media (6.5)	2.2%	—	Holger Schurig Destar	30/3/2009	16/6/2026	Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a crafted pin parameter.
CVE-2008-6538	Modificada	Media (5)	2.5%	—	Holger Schurig Destar	30/3/2009	16/6/2026	DeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add/CfgOptUser.