Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

31 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-17895	Modificada	Crítica (9.8)	4.8%	—	Lcds Laquis Scada	17/10/2018	17/6/2026	LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code execution.
CVE-2018-17893	Modificada	Crítica (9.8)	6.4%	—	Lcds Laquis Scada	17/10/2018	17/6/2026	LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution.
CVE-2017-6020	Modificada	Media (5.3)	8.5%	💥 Exploit	Lcds Laquis Scada	17/4/2018	17/6/2026	Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.
CVE-2018-5463	Modificada	Alta (7.8)	0.42%	—	Lcds Laquis Scada	9/4/2018	17/6/2026	A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA 4.1.0.3391 and earlier may allow code execution.
CVE-2017-6016	Modificada	Alta (7.3)	0.32%	—	Leao Consultoria E Desenvolvimento DE Sistemas Ltda ME Laquis Scada	19/5/2017	17/6/2026	An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. The following versions are affected: Versions 4.1 and prior versions released before January 20, 2017. An Improper Access Control vulnerability has been identified, which may allow an…
CVE-2012-0224	Modificada	Alta (9.3)	1.5%	—	7T Aquis	21/2/2012	16/6/2026	Untrusted search path vulnerability in 7-Technologies (7T) AQUIS 1.5 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0223.