Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2751▲ 74 respecto a la semana anterior

Críticas / altas1464▲ 358 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)89▼ 424 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-86938	Pendiente de análisis	Alta (7.3)	0.10%	—	Filemaker PRO^AI	23/9/2026	24/9/2026	A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3.
CVE-2023-42920	Modificada	Alta (7.8)	0.18%	—	Claris PRO Claris Filemaker PRO	19/3/2024	17/6/2026	Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on macOS.
CVE-2021-44147	Modificada	Media (5.5)	1.2%	—	Claris Filemaker PRO Claris Filemaker Server	22/11/2021	17/6/2026	An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.
CVE-2014-8347	Modificada	Alta (7.8)	1.4%	—	Claris Filemaker PRO Claris Filemaker PRO Advanced	11/2/2020	17/6/2026	An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges.
CVE-2014-5322	Modificada	Media (4.3)	1.8%	—	Filemaker PRO Filemaker PRO Advanced	22/9/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-3640.
CVE-2014-5321	Modificada	Media (5.8)	0.52%	—	Filemaker PRO Filemaker PRO Advanced	22/9/2014	17/6/2026	FileMaker Pro before 13 and Pro Advanced before 13 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2319.
CVE-2013-3640	Modificada	Media (4.3)	0.93%	—	Filemaker PRO Filemaker PRO Advanced	10/6/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 12 and Pro Advanced before 12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-2319	Modificada	Media (5.8)	0.52%	—	Filemaker PRO Filemaker PRO Advanced	10/6/2013	16/6/2026	FileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.