Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior

Críticas / altas1288▼ 199 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

56 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-7421	Modificada	Media (5.4)	0.27%	—	Mytoursapp Revel IN THE Rideau Lakes	19/10/2014	17/6/2026	The Revel in the Rideau Lakes (aka com.mytoursapp.android.app326) application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6923	Modificada	Media (5.4)	0.27%	—	Mobitrips Dubrovnik Guided Walking Tours	4/10/2014	17/6/2026	The Dubrovnik Guided Walking Tours (aka com.mytoursapp.android.app351) application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6782	Modificada	Media (5.4)	0.27%	—	Abrahamtours Abraham Tours	29/9/2014	17/6/2026	The Abraham Tours (aka com.mytoursapp.android.app432) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2010-4028	Modificada	Alta (7.5)	2.3%	—	HP Loadrunner WEB Tours HP Loadrunner	28/10/2010	16/6/2026	Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors.
CVE-2008-6303	Modificada	Alta (7.5)	0.97%	💥 Exploit	Toursmanager Tours Manager	26/2/2009	16/6/2026	SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands via the tourid parameter.
CVE-2008-6289	Modificada	Alta (7.5)	0.97%	💥 Exploit	Toursmanager Tours Manager	26/2/2009	16/6/2026	SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter.