Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
–

65 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.8)0.12%—Qualcomm Apq8064au FirmwareQualcomm Aqt1000 FirmwareQualcomm Ar8035 FirmwareQualcomm Csra6620 Firmware+1645/9/202317/6/2026
Memory corruption in Graphics while processing user packets for command submission.
ModificadaAlta (7.5)0.38%—Qualcomm 315 5G FirmwareQualcomm Aqt1000 FirmwareQualcomm Ar8035 FirmwareQualcomm Ar9380 Firmware+1905/9/202317/6/2026
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
ModificadaAlta (7.8)0.12%—Qualcomm 315 5G IOT FirmwareQualcomm Aqt1000 FirmwareQualcomm Ar8035 FirmwareQualcomm Ar9380 Firmware+1955/9/202317/6/2026
Memory corruption in WLAN HAL while parsing WMI command parameters.
ModificadaAlta (7.8)0.12%—Qualcomm 315 5G IOT FirmwareQualcomm Aqt1000 FirmwareQualcomm Ar8031 FirmwareQualcomm Ar8035 Firmware+2875/9/202317/6/2026
Memory corruption in WLAN HAL while handling command through WMI interfaces.
ModificadaAlta (7.8)0.12%—Qualcomm 315 5G IOT FirmwareQualcomm Apq8064au FirmwareQualcomm Aqt1000 FirmwareQualcomm Ar8031 Firmware+1844/7/202317/6/2026
Memory Corruption in WLAN HOST while fetching TX status information.
ModificadaAlta (7.8)0.12%—Qualcomm Aqt1000 FirmwareQualcomm Ar8031 FirmwareQualcomm Ar9380 FirmwareQualcomm C-v2x 9150 Firmware+1954/7/202317/6/2026
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
ModificadaAlta (7.8)0.12%—Qualcomm Ar8035 FirmwareQualcomm Csra6620 FirmwareQualcomm Csra6640 FirmwareQualcomm Fastconnect 6200 Firmware+1594/7/202317/6/2026
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
ModificadaAlta (7.8)0.12%—Qualcomm Ar8035 FirmwareQualcomm Csr8811 FirmwareQualcomm Csra6620 FirmwareQualcomm Csra6640 Firmware+1874/7/202317/6/2026
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
ModificadaAlta (7.8)0.12%—Qualcomm 315 5G IOT FirmwareQualcomm Apq8017 FirmwareQualcomm Aqt1000 FirmwareQualcomm Ar8031 Firmware+2014/7/202317/6/2026
Memory Corruption in Audio while allocating the ion buffer during the music playback.
ModificadaAlta (7.8)0.12%—Qualcomm 315 5G IOT FirmwareQualcomm Apq8017 FirmwareQualcomm Aqt1000 FirmwareQualcomm Ar8031 Firmware+2674/7/202317/6/2026
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
ModificadaAlta (7.8)0.12%—Qualcomm Ar8035 FirmwareQualcomm Csr8811 FirmwareQualcomm Csra6620 FirmwareQualcomm Csra6640 Firmware+1974/7/202317/6/2026
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
ModificadaAlta (7.2)5.3%—Mimosa B5 FirmwareMimosa B5C FirmwareMimosa C5C Firmware20/7/202117/6/2026
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the…
ModificadaMedia (6.1)0.91%—Mimosa B5 FirmwareMimosa B5C FirmwareMimosa C5C Firmware20/7/202117/6/2026
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to stored XSS in the set_banner() function of /var/www/core/controller/index.php. An unauthenticated attacker may set the contents of the /mnt/jffs2/banner.txt file, stored on the device's filesystem, to contain arbitrary JavaScript.…
ModificadaAlta (7.5)1.3%—Mitsubishielectric Qj71e71-100 FirmwareMitsubishielectric Qj71e71-b5 FirmwareMitsubishielectric Qj71e71-b2 Firmware13/2/201717/6/2026
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. Weakly encrypted passwords are transmitted to a MELSEC-Q PLC.
ModificadaAlta (8.6)2.6%—Mitsubishielectric Qj71e71-100 FirmwareMitsubishielectric Qj71e71-b5 FirmwareMitsubishielectric Qj71e71-b2 Firmware13/2/201717/6/2026
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected Ethernet interface module is connected to a MELSEC-Q PLC, which may allow a remote attacker to connect to the PLC via Port…