Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2730▼ 572 respecto a la semana anterior

Críticas / altas1301▼ 186 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)295▼ 215 respecto a la semana anterior

81 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-0651	Modificada	Crítica (9.8)	4.0%	—	Yokogawa Idefine FOR Prosafe-rs Firmware Yokogawa Stardom Versatile Data Server Firmware Yokogawa Stardom Fcn/fcj Simulator Firmware Yokogawa Astplanner+1	9/1/2019	17/6/2026	Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier) allows remote attackers to stop the license management function…
CVE-2014-6840	Modificada	Media (5.4)	0.27%	—	Weddingselections MY Wedding Planner	30/9/2014	17/6/2026	The My Wedding Planner (aka app.wedding) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5900	Modificada	Media (5.4)	0.27%	—	Myhomeworkapp Myhomework Student Planner	15/9/2014	17/6/2026	The myHomework Student Planner (aka com.myhomeowork) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5768	Modificada	Media (5.4)	0.27%	—	Foodplannerapp Food Planner	9/9/2014	17/6/2026	The Food Planner (aka dk.boggie.madplan.android) application 4.8.4.3-google for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2008-7077	Modificada	Alta (7.5)	0.97%	💥 Exploit	Relative Sailplanner	25/8/2009	16/6/2026	Multiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields.
CVE-2006-4070	Modificada	Media (5.1)	1.7%	—	Imendio Planner	10/8/2006	16/6/2026	Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename.