Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2997▼ 66 respecto a la semana anterior
Críticas / altas1460▲ 109 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior
59 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 1.6% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D8500 FirmwareNetgear R6220 Firmware+22 | 15/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000v2 before 1.0.0.53, D8500 before 1.0.3.44, R6220 before 1.1.0.80, R6250 before 1.0.4.34, R6260 before 1.1.0.64, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R6700… | |
| Modificada | Alta (8.8) | 1.7% | — | Schneider-electric D6220 FirmwareSchneider-electric D6220l FirmwareSchneider-electric D6230 FirmwareSchneider-electric D6230l Firmware+55 | 22/5/2019 | 17/6/2026 | An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands. | |
| Modificada | Alta (8.8) | 0.57% | — | Schneider-electric D6220 FirmwareSchneider-electric D6220l FirmwareSchneider-electric D6230 FirmwareSchneider-electric D6230l Firmware+55 | 22/5/2019 | 17/6/2026 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera. | |
| Modificada | Media (5.4) | 0.80% | — | Schneider-electric D6220 FirmwareSchneider-electric D6220l FirmwareSchneider-electric D6230 FirmwareSchneider-electric D6230l Firmware+55 | 22/5/2019 | 17/6/2026 | A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session. | |
| Modificada | Alta (8.8) | 2.2% | — | Schneider-electric D6220 FirmwareSchneider-electric D6220l FirmwareSchneider-electric D6230 FirmwareSchneider-electric D6230l Firmware+55 | 22/5/2019 | 17/6/2026 | A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands. | |
| Modificada | Alta (8.8) | 2.2% | — | Schneider-electric D6220 FirmwareSchneider-electric D6220l FirmwareSchneider-electric D6230 FirmwareSchneider-electric D6230l Firmware+55 | 22/5/2019 | 17/6/2026 | A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands. | |
| Modificada | Media (6.5) | 1.2% | — | Schneider-electric D6220 FirmwareSchneider-electric D6220l FirmwareSchneider-electric D6230 FirmwareSchneider-electric D6230l Firmware+55 | 22/5/2019 | 17/6/2026 | A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file. | |
| Analizada | Alta (8.1) | 89% | ⚠ Explotación activa💥 Exploit | Netgear R6200 FirmwareNetgear R6300 FirmwareNetgear Vegn2610 FirmwareNetgear Ac1450 Firmware+9 | 17/1/2017 | 17/6/2026 | An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote management option is set,… | |
| Analizada | Alta (8.8) | 100% | ⚠ Explotación activa💥 Exploit | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear R6250 FirmwareNetgear R6400 Firmware+7 | 14/12/2016 | 17/6/2026 | NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to… |