Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2976▼ 107 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 1.2% | — | Newphoria Corporation Applican | 20/11/2015 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers WebView anchor attachment in an applican application, a different vulnerability than… | |
| Modificada | Media (4.3) | 1.2% | — | Newphoria Corporation Applican | 20/11/2015 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID that is encountered by an applican application, a different vulnerability than CVE-2015-7772. | |
| Modificada | Media (6.8) | 1.1% | — | Newphoria Corporation 1.1 | 20/9/2015 | 17/6/2026 | The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors. | |
| Modificada | Media (6.8) | 1.1% | — | Newphoria Corporation Reversi | 20/9/2015 | 17/6/2026 | The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors. | |
| Modificada | Media (6.8) | 1.1% | — | Newphoria Corporation Koritore | 20/9/2015 | 17/6/2026 | The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors. | |
| Modificada | Media (6.8) | 1.5% | — | Newphoria Corporation Megaphone Music | 20/9/2015 | 17/6/2026 | The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors. | |
| Modificada | Media (6.8) | 1.1% | — | Newphoria Corporation Auction Camera | 20/9/2015 | 17/6/2026 | The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors. | |
| Modificada | Media (6.8) | 1.1% | — | Newphoria Corporation Applican | 20/9/2015 | 17/6/2026 | The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors. |