Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

85 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-47316	Analizada	Alta (7.5)	0.27%	—	Samsung Escargot	19/5/2026	24/7/2026	Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47315	Analizada	Alta (7.5)	0.27%	—	Samsung Escargot	19/5/2026	24/7/2026	Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47314	Analizada	Crítica (9.8)	0.32%	—	Samsung Escargot	19/5/2026	24/7/2026	Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47313	Analizada	Alta (7.5)	0.27%	—	Samsung Escargot	19/5/2026	24/7/2026	Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47312	Analizada	Alta (7.5)	0.27%	—	Samsung Escargot	19/5/2026	24/7/2026	Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47311	Analizada	Crítica (9.8)	0.32%	—	Samsung Escargot	19/5/2026	24/7/2026	Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47310	Analizada	Crítica (9.8)	0.32%	—	Samsung Escargot	19/5/2026	24/7/2026	Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47309	Analizada	Alta (7.5)	0.27%	—	Samsung Escargot	19/5/2026	24/7/2026	Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-40447	Analizada	Alta (7.5)	0.29%	—	Samsung Escargot	13/4/2026	17/6/2026	Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-40446	Analizada	Crítica (9.8)	0.29%	—	Samsung Escargot	13/4/2026	17/6/2026	Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-25209	Analizada	Crítica (9.1)	0.25%	—	Samsung Escargot	13/4/2026	17/6/2026	Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-25208	Analizada	Crítica (9.8)	0.25%	—	Samsung Escargot	13/4/2026	17/6/2026	Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-25207	Analizada	Crítica (9.8)	0.19%	—	Samsung Escargot	13/4/2026	17/6/2026	Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-25206	Analizada	Crítica (9.1)	0.18%	—	Samsung Escargot	13/4/2026	17/6/2026	Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-25205	Analizada	Crítica (9.8)	0.19%	—	Samsung Escargot	13/4/2026	17/6/2026	Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335 .
CVE-2026-25204	Analizada	Alta (7.5)	0.30%	—	Samsung Escargot	13/4/2026	17/6/2026	Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. This issue affects escarogt prior to commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335
CVE-2026-39841	Analizada	Media (6.3)	0.24%	—	Mediawiki Cargo	7/4/2026	24/7/2026	Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: before 3.8.7.
CVE-2026-39840	Analizada	Media (5.1)	0.24%	—	Mediawiki Cargo	7/4/2026	24/7/2026	Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows XSS Targeting Non-Script Elements.This issue affects Mediawiki - Cargo Extension: before 3.8.7.
CVE-2026-39839	Analizada	Media (6.3)	0.30%	—	Mediawiki Cargo	7/4/2026	24/7/2026	Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: before 3.8.7.
CVE-2026-39837	Analizada	Media (6.3)	0.24%	—	Mediawiki Cargo	7/4/2026	24/7/2026	Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in WikiWorks Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: before 3.8.7.
CVE-2026-25401	Aplazada	Alta (7.5)	0.28%	—	Arni Cinco Wpcargo Track AND Trace^AI	25/3/2026	17/6/2026	Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through <= 8.0.2.
CVE-2025-62671	Aplazada	Media (6.9)	0.45%	—	Wikimedia Mediawiki Cargo Extension^AI	18/10/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master.
CVE-2025-62655	Aplazada	Baja (2.1)	0.27%	—	Wikimedia Mediawiki Cargo^AI	17/10/2025	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44.
CVE-2025-31609	Aplazada	Media (4.3)	0.25%	—	Arni Cinco Wpcargo Track AND Trace^AI	31/3/2025	17/6/2026	Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through <= 8.0.2.
CVE-2025-27342	Aplazada	Media (4.3)	0.16%	—	Josesan Woo-recargo-de-equivalencia^AI	24/2/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in josesan WooCommerce Recargo de Equivalencia woo-recargo-de-equivalencia allows Cross Site Request Forgery.This issue affects WooCommerce Recargo de Equivalencia: from n/a through <= 1.6.24.