Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
52 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.1% | — | Totolink T6 Firmware | 16/9/2022 | 17/6/2026 | In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample. | |
| Modificada | Alta (7.5) | 1.1% | — | Totolink T6 Firmware | 1/7/2022 | 17/6/2026 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c. | |
| Modificada | Alta (7.5) | 1.1% | — | Totolink T6 Firmware | 1/7/2022 | 17/6/2026 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4. | |
| Modificada | Alta (7.5) | 1.1% | — | Totolink T6 Firmware | 1/7/2022 | 17/6/2026 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4. | |
| Modificada | Alta (7.5) | 1.1% | — | Totolink T6 Firmware | 1/7/2022 | 17/6/2026 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40. | |
| Modificada | Alta (7.5) | 1.1% | — | Totolink T6 Firmware | 1/7/2022 | 17/6/2026 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540. | |
| Modificada | Alta (7.5) | 1.1% | — | Totolink T6 Firmware | 1/7/2022 | 17/6/2026 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88. | |
| Modificada | Alta (7.5) | 1.1% | — | Totolink T6 Firmware | 1/7/2022 | 17/6/2026 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4. | |
| Modificada | Alta (7.5) | 1.1% | — | Totolink T6 Firmware | 1/7/2022 | 17/6/2026 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c. | |
| Modificada | Alta (7.5) | 1.1% | — | Totolink T6 Firmware | 1/7/2022 | 17/6/2026 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4. | |
| Modificada | Alta (7.5) | 1.1% | — | Totolink T6 Firmware | 1/7/2022 | 17/6/2026 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN_00413f80. | |
| Modificada | Crítica (9.8) | 25% | — | Totolink T6 Firmware | 24/2/2022 | 17/6/2026 | TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter. | |
| Modificada | Crítica (9.8) | 2.2% | — | Totolink T6 FirmwareTotolink T10 Firmware | 19/2/2022 | 17/6/2026 | A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet. | |
| Modificada | Crítica (9.8) | 2.2% | — | Totolink T6 FirmwareTotolink T10 Firmware | 19/2/2022 | 17/6/2026 | A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet. | |
| Modificada | Crítica (9.8) | 2.9% | — | Totolink T6 Firmware | 19/2/2022 | 17/6/2026 | A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet. | |
| Modificada | Crítica (9.8) | 3.0% | — | Totolink T6 Firmware | 19/2/2022 | 17/6/2026 | A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet. | |
| Modificada | Crítica (9.8) | 2.9% | — | Totolink T6 Firmware | 19/2/2022 | 17/6/2026 | A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet. | |
| Modificada | Crítica (9.8) | 2.9% | — | Totolink T6 FirmwareTotolink T10 Firmware | 19/2/2022 | 17/6/2026 | A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet. | |
| Modificada | Crítica (9.8) | 2.2% | — | Totolink T6 FirmwareTotolink T10 Firmware | 19/2/2022 | 17/6/2026 | A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet. | |
| Modificada | Crítica (9.8) | 2.2% | — | Totolink T6 FirmwareTotolink T10 Firmware | 19/2/2022 | 17/6/2026 | A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet. | |
| Modificada | Media (6.8) | 0.83% | — | Canon Eos-1d X FirmwareCanon Eos-1d X Mkii FirmwareCanon Eos-1d C FirmwareCanon EOS 5D Mark III Firmware+62 | 6/8/2019 | 17/6/2026 | Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and… | |
| Modificada | Alta (8.8) | 2.4% | — | Canon Eos-1d X FirmwareCanon Eos-1d X Mkii FirmwareCanon Eos-1d C FirmwareCanon EOS 5D Mark III Firmware+62 | 6/8/2019 | 17/6/2026 | Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and… | |
| Modificada | Alta (8.8) | 2.5% | — | Canon Eos-1d X FirmwareCanon Eos-1d X Mkii FirmwareCanon Eos-1d C FirmwareCanon EOS 5D Mark III Firmware+62 | 6/8/2019 | 17/6/2026 | Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and… | |
| Modificada | Alta (8.8) | 2.6% | — | Canon Eos-1d X FirmwareCanon Eos-1d X Mkii FirmwareCanon Eos-1d C FirmwareCanon EOS 5D Mark III Firmware+62 | 6/8/2019 | 17/6/2026 | Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and… | |
| Modificada | Media (6.5) | 1.2% | — | Canon Eos-1d X FirmwareCanon Eos-1d X Mkii FirmwareCanon Eos-1d C FirmwareCanon EOS 5D Mark III Firmware+62 | 6/8/2019 | 17/6/2026 | Missing authorization vulnerability exists in EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier,… |