Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2764▼ 485 respecto a la semana anterior
Críticas / altas1304▼ 211 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)245▼ 256 respecto a la semana anterior
–

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AplazadaMedia (4.3)0.20%—Wptexture Image Slider SlideshowAI8/1/202617/6/2026
Authorization Bypass Through User-Controlled Key vulnerability in Wptexture Image Slider Slideshow image-slider-slideshow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Slider Slideshow: from n/a through <= 1.8.
ModificadaMedia (4.8)0.60%—Contextureintl Page Security & Membership18/4/202217/6/2026
The Page Security & Membership WordPress plugin through 1.5.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
ModificadaAlta (7.8)0.82%—ARM Adaptive Scalable Texture Compression Encoder28/2/202217/6/2026
ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encode_ise().
ModificadaCrítica (9.8)1.2%—ARM Adaptive Scalable Texture Compression Encoder28/2/202217/6/2026
ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a stack-buffer-overflow occurred in function encode_ise() in function compress_symbolic_block_for_partition_2planes() in "/Source/astcenc_compress_symbolic.cpp".
ModificadaMedia (6.5)1.3%—Apple Texture18/12/201917/6/2026
Some analytics data was sent using HTTP rather than HTTPS. This was addressed by no longer sending this analytics data. This issue is fixed in Texture 5.11.10 for iOS, Texture 4.22.0.4 for Android. An attacker in a privileged network position may be able to intercept analytics data.
Orbitaley — Vulnerabilidades