Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2722▼ 6 respecto a la semana anterior

Críticas / altas1451▲ 315 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-69304	Aplazada	Crítica (9.3)	0.40%	—	Teconceappstore Allmart^AI	20/2/2026	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Allmart allmart-core allows Blind SQL Injection.This issue affects Allmart: from n/a through <= 1.1.
CVE-2020-12483	Modificada	Media (6.1)	0.68%	—	Vivo Appstore	23/3/2021	17/6/2026	The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully constructed parameters.
CVE-2019-10389	Modificada	Media (4.3)	0.61%	—	Jenkins Relution Enterprise Appstore Publisher	7/8/2019	17/6/2026	A missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server.
CVE-2019-10388	Modificada	Media (4.3)	0.64%	—	Jenkins Relution Enterprise Appstore Publisher	7/8/2019	17/6/2026	A cross-site request forgery vulnerability in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server.
CVE-2019-10281	Modificada	Alta (8.8)	1.7%	—	Jenkins Relution Enterprise Appstore Publisher	4/4/2019	17/6/2026	Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.