Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2740▼ 483 respecto a la semana anterior
Críticas / altas1302▼ 188 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior
309 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 3.8% | — | Mitrastar Gpt-2541gnac FirmwareMitrastar Dsl-100hn-t1 Firmware | 3/11/2017 | 17/6/2026 | MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented. | |
| Modificada | Alta (8.8) | 2.6% | — | Mitrastar Gpt-2541gnac FirmwareMitrastar Dsl-100hn-t1 Firmware | 3/11/2017 | 17/6/2026 | MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute. | |
| Modificada | Media (5.9) | 0.79% | — | Zyxel Nwa1100-n FirmwareZyxel Nwa1100-nh FirmwareZyxel Nwa1121-ni FirmwareZyxel Nwa1123-ac Firmware+21 | 28/9/2017 | 17/6/2026 | ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business… | |
| Modificada | Media (6.1) | 0.77% | — | Jensenofscandinavia Al3g FirmwareJensenofscandinavia Al5000ac FirmwareJensenofscandinavia Al59300 Firmware | 3/4/2017 | 17/6/2026 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout. | |
| Modificada | Media (6.1) | 0.79% | — | Jensenofscandinavia Al3g FirmwareJensenofscandinavia Al5000ac FirmwareJensenofscandinavia Al59300 Firmware | 3/4/2017 | 17/6/2026 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/* pages. | |
| Modificada | Alta (8.8) | 1.2% | — | Jensenofscandinavia Al3g FirmwareJensenofscandinavia Al5000ac FirmwareJensenofscandinavia Al59300 Firmware | 3/4/2017 | 17/6/2026 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to read passwords via a direct request to the x.asp page. | |
| Modificada | Alta (8.8) | 0.56% | — | Jensenofscandinavia Al3g FirmwareJensenofscandinavia Al5000ac FirmwareJensenofscandinavia Al59300 Firmware | 3/4/2017 | 17/6/2026 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct CSRF attacks via certain /goform/* pages. | |
| Modificada | Crítica (9.8) | 3.4% | — | Jensenofscandinavia Al3g FirmwareJensenofscandinavia Al5000ac FirmwareJensenofscandinavia Al59300 Firmware | 3/4/2017 | 17/6/2026 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/* pages. | |
| Modificada | Alta (7.3) | 5.0% | — | Schneider-electric Somachine Hvac Firmware | 15/7/2016 | 17/6/2026 | An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag. |