Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior
Críticas / altas1284▼ 85 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 29% | — | Chiyu-tech Bf-430 FirmwareChiyu-tech Bf-431 FirmwareChiyu-tech Bf-450m FirmwareChiyu-tech Semac S2 Firmware+10 | 4/6/2021 | 17/6/2026 | An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it. | |
| Modificada | Media (6.1) | 5.1% | — | Chiyu-tech Bf-430 FirmwareChiyu-tech Bf-431 FirmwareChiyu-tech Bf-450m FirmwareChiyu-tech Semac S2 Firmware+11 | 1/6/2021 | 17/6/2026 | An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMAC due to a lack of sanitization when the HTTP 404 message is generated. |