Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
81 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.4% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Crítica (9.8) | 1.4% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Crítica (9.8) | 1.4% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Crítica (9.8) | 1.4% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Crítica (9.8) | 1.4% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Crítica (9.8) | 1.4% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Crítica (9.8) | 1.4% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Crítica (9.8) | 1.4% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Crítica (9.8) | 1.4% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Crítica (9.8) | 1.4% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Crítica (9.8) | 1.6% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer… | |
| Modificada | Alta (8.8) | 5.8% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | An os command injection vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability. | |
| Modificada | Alta (8.1) | 2.6% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | A directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary file deletion. An attacker can send an HTTP request to trigger this vulnerability. | |
| Modificada | Crítica (9.8) | 4.3% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | An OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability. | |
| Modificada | Alta (8.8) | 4.1% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability. | |
| Modificada | Alta (8.8) | 3.7% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | A file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability. | |
| Modificada | Alta (8.8) | 3.7% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | A leftover debug code vulnerability exists in the httpd shell.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability. | |
| Modificada | Alta (8.8) | 3.9% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | A stack-based buffer overflow vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability. | |
| Modificada | Media (6.5) | 2.3% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability. | |
| Modificada | Alta (8.8) | 7.1% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability. | |
| Modificada | Alta (8.8) | 3.2% | — | Siretta Quartz-gold Firmware | 26/1/2023 | 17/6/2026 | A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability. | |
| Modificada | Crítica (9.8) | 0.69% | — | Siren Investigate | 5/1/2023 | 17/6/2026 | An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed. | |
| Modificada | Media (5.3) | 0.42% | — | Siren Investigate | 5/1/2023 | 17/6/2026 | An issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects. | |
| Modificada | Crítica (9.8) | 1.4% | — | Siren Investigate | 2/11/2021 | 17/6/2026 | In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globally in the Siren Investigate main process. | |
| Modificada | Alta (8.1) | 0.72% | — | Siren Investigate | 19/7/2021 | 17/6/2026 | Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (which is enabled by default). An attacker with access to the Investigate installation can specify an arbitrary URL in the parameters of the image proxy route and fetch external URLs as the… |