Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3037▲ 563 respecto a la semana anterior

Críticas / altas1444▲ 270 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)393▲ 186 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-68543	Aplazada	Alta (8.1)	0.58%	—	Thembay Diza^AI	20/2/2026	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.15.
CVE-2025-68544	Aplazada	Alta (7.5)	0.39%	—	Thembay Diza^AI	23/12/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.15.
CVE-2025-52729	Aplazada	Alta (8.1)	0.58%	—	Thembay Diza^AI	27/6/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.9.
CVE-2025-49261	Aplazada	Alta (8.1)	0.73%	—	Thembay Diza^AI	17/6/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.8.
CVE-2023-1014	Modificada	Alta (7.5)	0.54%	—	Dizayn Vira-investing	30/3/2023	17/6/2026	Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting. This issue affects Vira-Investing: before 1.0.84.86.
CVE-2023-1013	Modificada	Media (6.1)	0.36%	—	Dizayn Vira-investing	30/3/2023	17/6/2026	Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Virames Vira-Investing allows Cross-Site Scripting (XSS). This issue affects Vira-Investing: before 1.0.84.86.
CVE-2007-3178	Modificada	Alta (7.5)	1.3%	—	Zindizayn Okul WEB Sistemi	11/6/2007	16/6/2026	Multiple SQL injection vulnerabilities in Zindizayn Okul Web Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) pass parameter to (a) mezungiris.asp or (b) ogretmenkontrol.asp.