Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2565▼ 302 respecto a la semana anterior

Críticas / altas1351▲ 99 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-35644	Aplazada	Media (5.9)	0.17%	—	Pascal Birchler Preferred Languages^AI	6/3/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pascal Birchler Preferred Languages allows DOM-Based XSS.This issue affects Preferred Languages: from n/a through 2.2.2.
CVE-2025-64292	Aplazada	Media (6.5)	0.15%	—	Pascalbajorat Analytics Germanized FOR Google Analytics^AI	13/11/2025	30/9/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PascalBajorat Analytics Germanized for Google Analytics ga-germanized allows DOM-Based XSS.This issue affects Analytics Germanized for Google Analytics: from n/a through <= 1.6.2.
CVE-2025-49959	Aplazada	Alta (7.1)	0.25%	—	Pascal Casier Bbpress Move Topics^AI	22/10/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pascal Casier bbPress Move Topics bbp-move-topics allows Reflected XSS.This issue affects bbPress Move Topics: from n/a through <= 1.1.6.
CVE-2025-24763	Aplazada	Media (5.3)	0.34%	—	Pascal Casier Bbpress API^AI	6/6/2025	17/6/2026	Missing Authorization vulnerability in Pascal Casier bbPress API bbp-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects bbPress API: from n/a through <= 1.0.14.
CVE-2025-23499	Aplazada	Alta (7.1)	0.20%	—	Pascal Casier Board Election^AI	16/1/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Pascal Casier Board Election board-election allows Stored XSS.This issue affects Board Election: from n/a through <= 1.0.1.
CVE-2024-33935	Aplazada	Media (6.5)	0.30%	—	Pascal Bajorat PB Mailcrypt^AI	3/5/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pascal Bajorat PB MailCrypt allows Stored XSS.This issue affects PB MailCrypt: from n/a through 3.1.0.
CVE-2022-40976	Modificada	Media (5.5)	0.23%	—	Pilz PAS 4000 Pliz Pascal Pliz Pasconnect Pliz Pasmotion+1	24/11/2022	17/6/2026	A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.
CVE-2002-1699	Modificada	Alta (10)	2.6%	—	Pascal Michaud ASP Client Check	31/12/2002	16/6/2026	SQL injection vulnerability in ASP Client Check (ASPCC) 1.3 and 1.5 allows remote attackers to bypass authentication and gain unauthorized access via the password field.