Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior

Críticas / altas1415▲ 65 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

85 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-38088	Modificada	Media (6.5)	2.3%	—	Siretta Quartz-gold Firmware	26/1/2023	17/6/2026	A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2022-38066	Modificada	Alta (8.8)	7.1%	—	Siretta Quartz-gold Firmware	26/1/2023	17/6/2026	An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability.
CVE-2022-36279	Modificada	Alta (8.8)	3.2%	—	Siretta Quartz-gold Firmware	26/1/2023	17/6/2026	A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2021-43006	Modificada	Alta (8.8)	0.50%	—	Amzetta Zportal DVM Tools	7/12/2021	17/6/2026	AmZetta Amzetta zPortal DVM Tools is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVE-2021-43003	Modificada	Alta (8.8)	0.50%	—	Amzetta Zportal Windows Zclient	7/12/2021	17/6/2026	Amzetta zPortal Windows zClient is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVE-2021-43002	Modificada	Alta (8.8)	0.48%	—	Amzetta Zportal DVM Tools	7/12/2021	17/6/2026	Amzetta zPortal DVM Tools is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVE-2021-43000	Modificada	Alta (8.8)	0.48%	—	Amzetta Zportal Windows Zclient	7/12/2021	17/6/2026	Amzetta zPortal Windows zClient is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVE-2020-12855	Modificada	Alta (8.8)	2.2%	—	Seczetta Neprofile	26/8/2020	17/6/2026	A Host header injection vulnerability has been discovered in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can poison this header resulting in an adversary controlling the execution flow for the 302 HTTP status.
CVE-2020-12854	Modificada	Alta (8.8)	3.0%	—	Seczetta Neprofile	15/7/2020	17/6/2026	A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of the profile avatar.
CVE-2019-15787	Modificada	Alta (7.5)	1.4%	—	Libzetta-rs Project Libzetta-rs	29/8/2019	17/6/2026	libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic.