Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2684▼ 80 respecto a la semana anterior

Críticas / altas1442▲ 302 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-26081	Analizada	Media (4.8)	0.48%	—	Haproxy Haproxy Aloha Haproxy Enterprise	20/7/2026	25/8/2026	HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
CVE-2026-26080	Analizada	Baja (3.7)	0.55%	—	Haproxy Haproxy Aloha Haproxy Enterprise	20/7/2026	25/8/2026	HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.
CVE-2025-11230	Analizada	Alta (7.5)	0.69%	—	Haproxy Aloha Appliance Haproxy Haproxy Enterprise Haproxy Kubernetes Ingress Controller	19/11/2025	17/6/2026	Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.
CVE-2025-46478	Aplazada	Alta (7.1)	0.28%	—	Metaloha Dropdown Content^AI	24/4/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in metaloha Dropdown Content dropdown-content allows Stored XSS.This issue affects Dropdown Content: from n/a through <= 1.0.2.
CVE-2014-7333	Modificada	Media (5.4)	0.29%	—	Qmania Aloha Guide	19/10/2014	17/6/2026	The Aloha Guide (aka com.aloha.guide.japnese) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-7317	Modificada	Media (5.4)	0.29%	—	Onesolutionapps Aloha Bail Bonds	19/10/2014	17/6/2026	The Aloha Bail Bonds (aka com.onesolutionapps.alohabailbondsandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6812	Modificada	Media (5.4)	0.29%	—	Qmania Aloha Guide	30/9/2014	17/6/2026	The Aloha Guide (aka com.aloha.guide.english) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6781	Modificada	Media (5.4)	0.27%	—	Mobilizedsolutions Aloha Stadium - Hawaii	29/9/2014	17/6/2026	The Aloha Stadium - Hawaii (aka com.stadium.aloha) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.