Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2568▼ 310 respecto a la semana anterior
Críticas / altas1351▲ 96 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
42 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Baja (2.1) | 0.23% | — | Codeastro Human Resource Management SystemAI | 29/6/2026 | 29/6/2026 | A vulnerability was found in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely. The exploit has been made public and could be used. | |
| Aplazada | Baja (2.1) | 0.33% | — | Codeastro Human Resource Management SystemAI | 29/6/2026 | 29/6/2026 | A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function GetFileInfo of the file hrsystem/application/models/Employee_model.php of the component View Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched… | |
| Aplazada | Baja (2.1) | 0.33% | — | Codeastro Human Resource Management SystemAI | 29/6/2026 | 29/6/2026 | A vulnerability was detected in CodeAstro Human Resource Management System 1.0. This issue affects the function emselectByCode of the file application/models/Employee_model.php of the component Update_Earn_Leave Endpoint. The manipulation of the argument emid results in sql injection. The attack can be launched… | |
| Aplazada | Baja (2.1) | 0.25% | — | Codeastro Human Resource Management SystemAI | 12/6/2026 | 17/6/2026 | A weakness has been identified in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function Invoice of the file \application\controllers\Payroll.php of the component Payroll Invoice Module. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is… | |
| Aplazada | Baja (2) | 0.20% | — | Codeastro Human Resource Management SystemAI | 12/6/2026 | 17/6/2026 | A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. This affects an unknown part of the file /Projects/Add_Projects of the component Projects Management Page. The manipulation of the argument protitle results in cross site scripting. The attack may be launched remotely. The exploit… | |
| Aplazada | Baja (2) | 0.20% | — | Codeastro Human Resource Management SystemAI | 12/6/2026 | 17/6/2026 | A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/add_tod of the component Dashboard Interface. The manipulation of the argument todo_data leads to cross site scripting. The attack may be initiated remotely. The… | |
| Aplazada | Baja (1.9) | 0.22% | — | Codeastro Human Resource Management SystemAI | 8/6/2026 | 23/7/2026 | A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function of the file /notice/All_notice of the component Notice Board Management. Such manipulation of the argument Notice Title with the input <svg onload="alert('Stored XSS Triggered by Ashik Mohamed')"> as part… | |
| Analizada | Media (5.5) | 0.39% | — | Angeljudesuarez Human Resource Management System | 19/11/2025 | 17/6/2026 | A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown function of the file /src/store/NoticeStore.php. Such manipulation of the argument noticeDesc leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and… | |
| Analizada | Media (5.5) | 0.39% | — | Angeljudesuarez Human Resource Management System | 19/11/2025 | 17/6/2026 | A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown processing of the file /src/store/EventStore.php. This manipulation of the argument eventSubject causes sql injection. The attack can be initiated remotely. The exploit has been made available to the… | |
| Analizada | Media (4.8) | 0.17% | — | Oretnom23 Human Resource Management System | 29/7/2025 | 17/6/2026 | Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'employeeid' parameter in/detailview.php. | |
| Analizada | Media (4.8) | 0.17% | — | Oretnom23 Human Resource Management System | 29/7/2025 | 17/6/2026 | Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searcstate' parameter in/state.php. | |
| Analizada | Media (4.8) | 0.17% | — | Oretnom23 Human Resource Management System | 29/7/2025 | 17/6/2026 | Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccountry' parameter in/country.php. | |
| Analizada | Media (4.8) | 0.17% | — | Oretnom23 Human Resource Management System | 29/7/2025 | 17/6/2026 | Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccity' parameter in /city.php. | |
| Analizada | Alta (8.7) | 0.30% | — | Oretnom23 Human Resource Management System | 29/7/2025 | 17/6/2026 | SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint. | |
| Analizada | Media (6.9) | 0.56% | — | 1000projects Human Resource Management System | 7/4/2025 | 17/6/2026 | A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /controller/employee.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been… | |
| Analizada | Media (6.9) | 0.70% | — | 1000projects Human Resource Management System | 29/12/2024 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects some unknown processing of the file /employeeview.php. The manipulation of the argument search leads to sql injection. The attack may be initiated remotely. The exploit has been… | |
| Analizada | Crítica (9.8) | 0.64% | — | Oretnom23 Human Resource Management System | 30/5/2024 | 17/6/2026 | A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter. | |
| Analizada | Media (5.4) | 0.35% | — | Oretnom23 Human Resource Management System | 30/5/2024 | 17/6/2026 | A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter. | |
| Analizada | Media (4.3) | 0.48% | — | Oretnom23 Human Resource Management System | 14/5/2024 | 17/6/2026 | Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket. | |
| Analizada | Media (5.9) | 0.39% | — | Oretnom23 Human Resource Management System | 14/5/2024 | 17/6/2026 | Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter. | |
| Analizada | Alta (8.8) | 0.84% | — | Oretnom23 Human Resource Management System | 14/5/2024 | 17/6/2026 | Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation. | |
| Analizada | Alta (7.5) | 0.78% | — | Oretnom23 Human Resource Management System | 14/5/2024 | 17/6/2026 | Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter. | |
| Modificada | Crítica (9.8) | 0.74% | — | Oretnom23 Human Resource Management System | 23/6/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file detailview.php. The manipulation of the argument employeeid leads to sql injection. The attack can be initiated remotely. The exploit has been… | |
| Modificada | Media (6.1) | 0.55% | — | Oretnom23 Human Resource Management System | 3/12/2022 | 17/6/2026 | A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown function of the file /hrm/employeeview.php. The manipulation of the argument search leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been… | |
| Modificada | Alta (7.2) | 0.73% | — | Oretnom23 Human Resource Management System | 3/12/2022 | 17/6/2026 | A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /hrm/employeeadd.php. The manipulation of the argument empid leads to sql injection. The attack may be initiated remotely. The exploit has been… |