Alertas de Seguridad de la Información

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20247] WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthen…

WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid parameter. Attackers can send GET requests with crafted SQL payloads in the aid parameter to extract sensitive database information including user credentials and table contents.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20248] Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attack…

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests to asgallDownload.php with directory traversal sequences ../ to access sensitive files outside the intended directory.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20249] Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attack…

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Attackers can send GET requests with crafted SQL payloads in the albid parameter to extract sensitive database information including user credentials and authentication hashes.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20250] Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers …

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to macdownload.php with directory traversal sequences to access sensitive files like wp-load.php outside the intended plugin directory.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2016-20065] Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unaut…

Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the selectedCategory parameter. Attackers can submit POST requests to the admin-ajax.php endpoint with the UpdateCategoryList action to extract sensitive database information from WordPress tables.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2017-20243] WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerab…

WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the space_id parameter. Attackers can send GET requests to the booking-page endpoint with malicious space_id values using AND SLEEP() payloads to extract sensitive database information.

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2016-20062] Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthent…

Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the 'pollid' POST parameter. Attackers can send requests to the admin-ajax.php endpoint with the 'spAjaxResults' action and malicious 'pollid' values to execute arbitrary SQL queries and read sensitive data from the WordP…

nvdaltovulnerabilidad CVSS 8.2 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-41720] Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a …

Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password. Affected versions: Spring LDAP 2.4.0 through 2.4.4; 3.2.0 through 3.2.17; 3.3.0 through 3.3.7; 4.0.0 through 4.0.3.

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-40983] In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a…

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-40984] In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a…

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18; 1.9.0 through 1.9.17. micrometer-jetty11 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.1…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-40128] SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a …

SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal and processing of the included file. Processing the included file could allow the attacker to view or modify sensitive information or render any part of the local system unavailable.

nvdcriticovulnerabilidad CVSS 9.0 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-27671] Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP…

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

08/06/2026

[CVE-2026-49141] WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine…

WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled contact_id in the POST request body without tenant ownership verification. Attackers can exploit the service-role client that bypasses row-level security to modif…

nvdaltovulnerabilidad CVSS 7.1 NVD

S Alto vulnerabilidad

08/06/2026

[CVE-2026-48507] Snipe-IT is an IT asset/license management system. A vulnerability in versions prior to 8.6.0 allows…

Snipe-IT is an IT asset/license management system. A vulnerability in versions prior to 8.6.0 allows a non-admin user holding only the granular `users.edit` permission to lock every admin out of the instance by editing the `activated` flag (which determines whether or not a user can login) and the `ldap_import` flag, which determines whether or not the user can request a password reset. Version 8…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

08/06/2026

[CVE-2026-46481] OpenMetadata is a unified metadata platform. Prior to version 1.12.4, a non-admin SSO user can trigg…

OpenMetadata is a unified metadata platform. Prior to version 1.12.4, a non-admin SSO user can trigger a TEST_CONNECTION workflow for a Database Service and receive, in the HTTP 201 response of POST /api/v1/automations/workflows, both the cleartext database password in request.connection.config.password and the ingestion bot JWT in openMetadataServerConnection.securityConfig.jwtToken. The leaked i…

nvdaltovulnerabilidad CVSS 8.3 NVD

M Crítico vulnerabilidad

08/06/2026

[CVE-2026-41448] AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability t…

AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string concatenation in the token file path construction within the authglinet middleware. Attackers can craft a request with a traversal payload in…

nvdcriticovulnerabilidad CVSS 9.4 NVD

A Alto vulnerabilidad

08/06/2026

[CVE-2026-49975] Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to …

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

nvdaltovulnerabilidad CVSS 7.5 NVD

A Alto vulnerabilidad

08/06/2026

[CVE-2026-44185] Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker contr…

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

08/06/2026

[CVE-2026-36786] Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow i…

Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 parameter of the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

08/06/2026

[CVE-2026-36789] Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stac…

Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the fromGstDhcpSetSer function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

nvdaltovulnerabilidad CVSS 7.5 NVD