Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3072▲ 552 respecto a la semana anterior

Críticas / altas1458▲ 273 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)383▲ 176 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-74015	Aplazada	Crítica (9.3)	0.40%	—	Readabler^AI	18/8/2026	20/8/2026	Unauthenticated SQL Injection in Readabler < 2.0.18 versions.
CVE-2025-50983	Analizada	Alta (8.3)	0.35%	—	Readarr	27/8/2025	17/6/2026	SQL Injection vulnerability exists in the sortKey parameter of the GET /api/v1/wanted/cutoff API endpoint in readarr 0.4.15.2787. The endpoint fails to properly sanitize user-supplied input, allowing attackers to inject and execute arbitrary SQL commands against the backend SQLite database. Sqlmap confirmed…
CVE-2016-10757	Modificada	Alta (8.8)	1.3%	—	Readaxo	24/5/2019	17/6/2026	In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php.
CVE-2018-10595	Modificada	Media (6.3)	0.41%	—	BD Database Manager BD Performa BD Reada	24/5/2018	17/6/2026	A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.
CVE-2018-10593	Modificada	Media (5.6)	0.37%	—	BD Database Manager BD Performa BD Reada	24/5/2018	17/6/2026	A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in data corruption.