Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

55 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-11528	Modificada	Alta (7.5)	1.2%	—	Softing Uagate SI Firmware	10/10/2019	17/6/2026	An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable.
CVE-2019-11527	Modificada	Alta (8.8)	3.5%	—	Softing Uagate SI Firmware	10/10/2019	17/6/2026	An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter.
CVE-2019-11526	Modificada	Crítica (9.8)	2.0%	—	Softing Uagate SI Firmware	10/10/2019	17/6/2026	An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path injection. This enables the Attacker to write files with superuser privileges in specific locations.
CVE-2014-6617	Modificada	Crítica (9.8)	4.4%	—	Industrial.softing Fg-100 PB Profibus Firmware	9/3/2018	17/6/2026	Softing FG-100 PB PROFIBUS firmware version FG-x00-PB_V2.02.0.00 contains a hardcoded password for the root account, which allows remote attackers to obtain administrative access via a TELNET session.
CVE-2014-6616	Modificada	Media (4.3)	1.9%	—	Softing Fg-x00 Profibus Firmware	31/8/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in Softing FG-100 PROFIBUS Single Channel (FG-100-PB) with firmware FG-x00-PB_V2.02.0.00 allows remote attackers to inject arbitrary web script or HTML via the DEVICE_NAME parameter to cgi-bin/CFGhttp/.