Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior

Críticas / altas1313▼ 190 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior

81 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-5688	Modificada	Media (5.4)	0.30%	—	Runtastic Pedometer	9/9/2014	17/6/2026	The Runtastic Pedometer (aka com.runtastic.android.pedometer.lite) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-0673	Modificada	Media (4.3)	2.2%	—	Cisco Video Surveillance Indoor Fixed Dome IP HD Camera	25/1/2014	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCud10943 and CSCud10950.
CVE-2012-3913	Modificada	Media (5)	1.5%	—	Cisco Vc240 Network Bullet Camera Cisco Video Surveillance Vc220 Network Dome Camera	1/8/2013	16/6/2026	The Cisco VC220 and VC240 cameras allow remote attackers to cause a denial of service (WebUI outage) via crafted packets, aka Bug IDs CSCtf73188, CSCtf88059, CSCtf87951, CSCtf87908, and CSCtf88019.
CVE-2013-1606	Modificada	Alta (7.5)	23%	💥 Exploit	UI Airvision Firmware UI Aircam UI Aircam Dome UI Aircam Mini	18/7/2013	16/6/2026	Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request.
CVE-2013-0139	Modificada	Alta (7.8)	1.6%	—	Arecont Vision Av1355dn Megadome Camera	18/4/2013	16/6/2026	The Arecont Vision AV1355DN MegaDome camera allows remote attackers to cause a denial of service (video-capture outage) via a packet to UDP port 69.
CVE-2006-3836	Modificada	Media (5)	3.5%	💥 Exploit	Unidomedia Chameleon LE	25/7/2006	16/6/2026	Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attackers to read arbitrary files via the rmid parameter.