Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2570▼ 300 respecto a la semana anterior
Críticas / altas1348▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
668 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (4.9) | 0.45% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks… | |
| Analizada | Media (6.5) | 0.42% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful… | |
| Analizada | Media (4.9) | 0.45% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can… | |
| Analizada | Media (4.9) | 0.45% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this… | |
| Analizada | Media (6.5) | 0.42% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL… | |
| Analizada | Media (6.5) | 0.42% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability… | |
| Analizada | Media (6.5) | 0.42% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL… | |
| Analizada | Media (6.5) | 0.42% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL… | |
| Analizada | Media (4.9) | 0.45% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this… | |
| Analizada | Media (6.5) | 0.30% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful… | |
| Analizada | Media (4.3) | 0.24% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.… | |
| Analizada | Media (6.5) | 0.30% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful… | |
| Analizada | Media (4.9) | 0.32% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.… | |
| Analizada | Media (4.9) | 0.32% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks… | |
| Analizada | Media (4.9) | 0.32% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.… | |
| Analizada | Baja (2.7) | 0.26% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.… | |
| Analizada | Media (4.9) | 0.32% | — | Oracle Mysql Server | 21/4/2026 | 17/6/2026 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.… | |
| Analizada | Alta (8.8) | 0.91% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/4/2026 | 24/7/2026 | Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. | |
| Analizada | Alta (7.8) | 0.32% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/4/2026 | 17/6/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.32% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/4/2026 | 17/6/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. | |
| Pendiente de análisis | Alta (8.8) | 0.46% | — | Microsoft Dynamics 365 Customer EngagementAIMicrosoft SQL Server Reporting ServicesAI | 18/3/2026 | 17/6/2026 | Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized reports via raw SQL queries in an upload of a .rdl (Report Definition Language) file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting Services Reports… | |
| Aplazada | Media (6.9) | 0.12% | — | SQL Server Password ChangerAI | 11/3/2026 | 17/6/2026 | SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can inject 6000 bytes of data into the User Name and Registration Code field to trigger a denial of service condition. | |
| Analizada | Alta (8.8) | 0.99% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 10/3/2026 | 17/6/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 0.96% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 10/3/2026 | 17/6/2026 | Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 2.0% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 10/3/2026 | 10/7/2026 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |