Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2616▼ 309 respecto a la semana anterior
Críticas / altas1342▲ 71 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 465 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 0.23% | — | Splashin | 18/7/2025 | 5/7/2026 | Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users. | |
| Modificada | Media (5.3) | 0.34% | — | Splashin | 18/7/2025 | 5/7/2026 | Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users. | |
| Modificada | Alta (7.2) | 3.7% | — | Splashing Images Project Splashing Images | 30/1/2018 | 17/6/2026 | admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows authenticated (administrator, editor, or author) remote attackers to conduct PHP Object Injection attacks via crafted serialized data in the 'session' HTTP GET parameter to… | |
| Modificada | Media (4.8) | 1.0% | — | Splashing Images Project Splashing Images | 30/1/2018 | 17/6/2026 | A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search parameter to wp-admin/upload.php. |