Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2855▼ 166 respecto a la semana anterior
Críticas / altas1379▲ 45 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 88% | — | Chiyu-tech Bf-631 FirmwareChiyu-tech Bf-630 FirmwareChiyu-tech Semac S2 FirmwareChiyu-tech Semac D1 Firmware+7 | 1/6/2021 | 17/6/2026 | An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter. | |
| Modificada | Media (6.5) | 44% | — | Chiyu-tech Semac S2 FirmwareChiyu-tech Semac D1 FirmwareChiyu-tech Semac D2 FirmwareChiyu-tech Semac D4 Firmware+7 | 1/6/2021 | 17/6/2026 | A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer (> 32 bits) on the page parameter that will crash the web portal and making it… |