Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 211 respecto a la semana anterior

Críticas / altas1376▲ 147 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-36857	Modificada	Baja (2.4)	0.14%	—	Google Android Samsung Photo Editor	9/9/2022	17/6/2026	Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data.
CVE-2014-6004	Modificada	Media (5.4)	0.27%	—	Pocket CAM Photo Editor Project Pocket CAM Photo Editor	22/9/2014	17/6/2026	The Pocket Cam Photo Editor (aka mobi.pocketcam.editor) application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5614	Modificada	Media (5.4)	0.27%	—	Etoolkit Love Collage - Photo Editor	9/9/2014	17/6/2026	The Love Collage - Photo Editor (aka com.etoolkit.lovecollage) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2011-5152	Modificada	Media (6.9)	0.36%	—	Acdsee Photo Editor 2008	6/9/2012	16/6/2026	Multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 allow local users to gain privileges via a Trojan horse (1) Wintab32.dll or (2) CV11-DialogEditor.dll file in the current working directory, as demonstrated by a directory that contains a .apd file. NOTE: the provenance of this…
CVE-2007-6009	Modificada	Alta (9.3)	3.9%	—	Acdsee Photo Editor Acdsee Photo Manager Acdsee PRO Photo Manager	15/11/2007	16/6/2026	Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long section string in a (1) XBM or (2) XPM file to (a) ID_X.apl or (b) IDE_ACDStd.apl. NOTE: the PSP and LHA vectors are already covered by CVE-2007-4344 and CVE-2007-6007. NOTE: these might be integer…
CVE-2007-4344	Modificada	Alta (9.3)	4.8%	—	Acdsee Photo Editor Acdsee Photo Manager Acdsee PRO Photo Manager	15/11/2007	16/6/2026	Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in (1) a PSP image to the ID_PSP.apl plug-in or (2) an LHA archive to the AM_LHA.apl…
CVE-2007-6007	Modificada	Media (6.8)	3.0%	—	Acdsee Photo Editor Acdsee Photo Manager Acdsee PRO Photo Manager	15/11/2007	16/6/2026	Integer overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow.
CVE-2007-2193	Modificada	Alta (9.3)	37%	—	ACD Systems Acdsee ACD Systems Photo Editor	24/4/2007	16/6/2026	Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information.