Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2025-41111 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_denuncia' in '/backend/api/buscarComentariosByDenuncia.php'. | 18 Oct |
| CVE-2025-41112 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros2.php'. | 18 Oct |
| CVE-2025-41113 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_denuncia' in '/backend/api/buscarDenunciaByPin.php'. | 18 Oct |
| CVE-2025-41114 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDocumentosByIdDenunciaUsuario.php'. | 18 Oct |
| CVE-2025-41335 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'id_sociedad' in '/api/buscarEmpresaById.php'. | 18 Oct |
| CVE-2025-41336 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros.php'. | 18 Oct |
| CVE-2025-41337 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarSSOParametros.php'. | 18 Oct |
| CVE-2025-41338 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarTestigoByIdDenunciaUsuario.php'. | 18 Oct |
| CVE-2025-41339 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_sociedad' in '/backend/api/buscarTipoDenuncia.php'. | 18 Oct |
| CVE-2025-41340 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_tp_denuncia' and 'id_sociedad' in '/backend/api/buscarTipoDenunciabyId.php'. | 18 Oct |
| CVE-2025-41341 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'. | 18 Oct |
| CVE-2025-41342 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_user' in '/backend/api/buscarUsuarioId.php'. | 18 Oct |
| CVE-2025-41343 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'email' in '/backend/api/users/searchUserByEmail.php'. | 18 Oct |
| CVE-2025-41344 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_archivo' in '/backend/api/verArchivo.php'. | 18 Oct |
| CVE-2025-41345 | 8.7 high | 0.00% | canaldenuncia, canaldenuncia.app | A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDenunciasById.php'. | 18 Oct |
15 of 15
Download these 15 as CSV · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.