CVE Watch405,425 en archivo total

Vulnerabilidades explotables hoy

405,425en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,762

Nuevos KEV · 24H0

Exploit Today ≥ 701,694

Distribución · última ventana

Crítico
5,620
Alto
21,747
Medio
20,103
Bajo
2,112

Filtros

Ventana

Severidad

Filtros

Vulnerabilidades405,361–405,400 · 405,425

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1192803.7 BAJ

—

———MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the MariaDbPoolConnection.recover() and MariaDbPoolPinnedConnection.recover() implementations trusted the gtrid_length and bqual_length columns returned by XA RECOVER. The methods allocated and split Xid byte arrays without validating the lengths against Xid.MAXGTRIDSIZE, Xid.MAXBQUALSIZE, or the actual data payload. A malicious or compromised server, or a machine-in-the-middle attacker, could cause large allocations, NegativeArraySizeException, or ArrayIndexOutOfBoundsException during XA recovery. This issue is fixed in versions 3.3.7, 3.4.5, and 3.5.11.5h CVE-2026-107060—

—

———Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.9h CVE-2026-1070477.5 ALT

—

———Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.6h CVE-2026-115794—

—

———P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a received RTA alarm frame without checking it against the length of the received frame. A short frame can make the callback receive a length of up to 65507 bytes. An application that copies the reported number of bytes reads past the end of the receive buffer. The attacker must have established an Application Relationship and requires ADJACENT network access. Applications that do not use the alarm data are not affected.10h CVE-2026-115795—

—

———P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next block in DCP Set and Identify requests. If the last block ends at the end of the receive buffer, the block length of the following block is read past the end of the buffer. In addition, a DCP Set block with a length smaller than the two-byte block qualifier makes the length underflow, so the block is processed with a length of 65534 bytes. This can cause a crash (denial of service) or disclose a small amount of memory content. Requires ADJACENT network access.10h CVE-2026-107044—

—

———Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.9h CVE-2023-7357—

—

———A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 (11.19.4.0) release.9h CVE-2026-908726.6 MED

—

———Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an authenticated Manager administrator to execute arbitrary commands with the privileges of the WS_FTP Server IIS worker process.10h CVE-2026-1168486.5 MED

—

———Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovations The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 6.5.3.10h CVE-2026-908715.3 MED

—

———Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an unauthenticated attacker to affect files outside the intended directory.10h CVE-2026-1168647.2 ALT

—

———Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions.10h CVE-2026-908649.1 CRÍ

—

———A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modify files outside their authorized scope.10h CVE-2026-1168657.2 ALT

—

———Editor PHP Object Injection in Zippy <= 1.7.0 versions.10h CVE-2026-1192815.9 MED

—

———MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the connector assumed result bytes were UTF-8 but guarded only changes to character_set_client. It did not reject non-UTF-8 character_set_results changes and relied on the server's global session_track_system_variables configuration to report character-set changes. A malicious or compromised server, or a machine-in-the-middle attacker, could suppress tracking or change the result charset so application strings differed from the returned bytes, potentially defeating application-side validation or escaping that depended on the decoded values. This issue is fixed in versions 3.3.7, 3.4.5, and 3.5.11.5h CVE-2026-880778.8 ALT

—

———Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.10h CVE-2026-858978.8 ALT

—

———Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.10h CVE-2026-66912—

—

———Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Classic UI. Due to insufficient sanitization of the From header value, a remote attacker can send a crafted email containing a malicious From header with an embedded JavaScript payload. When the victim opens the message in Classic UI and clicks Reply while composing in HTML mode with reply headers disabled, the unsanitized From header content is rendered as HTML and the JavaScript payload executes in the victim's browser, potentially allowing the attacker to steal session information or perform actions on behalf of the victim. This issue was fixed in version 10.1.2110h CVE-2026-1168668.8 ALT

—

———Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.10h CVE-2026-1168678.8 ALT

—

———Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions.8h CVE-2026-1168688.8 ALT

—

———Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.6h CVE-2026-66911—

—

———Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due to lack of sanitization of the Content-Location header, an attacker can set it to a javascript: URI. An unauthenticated remote attacker can send a crafted email to a victim; when the victim opens the email in the Zimbra web interface and clicks the attachment name, the JavaScript payload executes in the victim's browser context. This issue was fixed in version 10.1.2110h CVE-2026-621319.8 CRÍ

—

———Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.10h CVE-2026-1168697.2 ALT

—

———Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.10h CVE-2026-1180738.8 ALT

—

———Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.10h CVE-2026-620189.8 CRÍ

—

———Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.6h CVE-2026-620179.8 CRÍ

—

———Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.8h CVE-2026-1180747.2 ALT

—

———Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.10h CVE-2026-1180758.8 ALT

—

———Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.8h CVE-2026-620169.8 CRÍ

—

———Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.10h CVE-2026-620159.8 CRÍ

—

———Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.10h CVE-2026-620129.8 CRÍ

—

———Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.8h CVE-2026-961998.8 ALT

—

———Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.10h CVE-2026-1180768.8 ALT

—

———Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.6h CVE-2026-962038.8 ALT

—

———Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.10h CVE-2026-1180777.2 ALT

—

———Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.10h CVE-2026-620119.8 CRÍ

—

———Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.10h CVE-2025-125236.5 MED

—

———Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user9h CVE-2026-1180787.2 ALT

—

———Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.10h CVE-2026-107043—

—

———Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.9h CVE-2026-620109.8 CRÍ

—

———Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.10h