Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior
Críticas / altas1294▼ 234 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
1690 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.8) | 0.63% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | |
| Analizada | Crítica (9.8) | 0.60% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | |
| Analizada | Crítica (9.8) | 0.46% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | |
| Analizada | Crítica (9.8) | 0.61% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0 | |
| Analizada | Crítica (9.8) | 12% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0. | |
| Analizada | Crítica (9.8) | 0.60% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | |
| Analizada | Crítica (9.8) | 0.57% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0 | |
| Analizada | Crítica (9.8) | 0.47% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | |
| Analizada | Alta (8.8) | 10% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | |
| Analizada | Crítica (9.8) | 0.50% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | |
| Analizada | Alta (8.8) | 9.0% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. | |
| Analizada | Crítica (9.8) | 0.61% | — | Samsung Magicinfo 9 Server | 23/7/2025 | 17/6/2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0 | |
| Aplazada | Crítica (9.3) | 0.97% | — | Samsung Wea453eAI | 15/7/2025 | 17/6/2026 | An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.2.4.T1 via improper input validation in the “Tech Support” diagnostic functionality. The command1 and command2 POST or GET parameters accept arbitrary shell commands that are executed with root… | |
| Analizada | Media (5.5) | 0.13% | — | Samsung Android | 8/7/2025 | 17/6/2026 | Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. | |
| Analizada | Media (5.5) | 0.13% | — | Samsung Android | 8/7/2025 | 17/6/2026 | Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. | |
| Analizada | Media (5.5) | 0.13% | — | Samsung Android | 8/7/2025 | 17/6/2026 | Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. | |
| Analizada | Alta (7.8) | 0.13% | — | Samsung Android | 8/7/2025 | 17/6/2026 | Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory. | |
| Analizada | Media (5.5) | 0.13% | — | Samsung Android | 8/7/2025 | 17/6/2026 | Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information. | |
| Analizada | Media (5.5) | 0.09% | — | Samsung Wear OS | 8/7/2025 | 17/6/2026 | Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device. | |
| Analizada | Media (5.5) | 0.14% | — | Samsung Android | 8/7/2025 | 17/6/2026 | Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information. | |
| Analizada | Media (5.5) | 0.12% | — | Samsung Android | 8/7/2025 | 17/6/2026 | Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast. | |
| Analizada | Media (5.5) | 0.13% | — | Samsung Android | 8/7/2025 | 17/6/2026 | Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast. | |
| Analizada | Baja (3.3) | 0.13% | — | Samsung Android | 8/7/2025 | 17/6/2026 | Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth. | |
| Analizada | Baja (2.1) | 0.17% | — | Samsung Android | 8/7/2025 | 17/6/2026 | Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password. | |
| Analizada | Baja (3.3) | 0.13% | — | Samsung Wear OS | 8/7/2025 | 17/6/2026 | Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number. |