Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior

Críticas / altas1367▲ 28 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-10848	Modificada	Media (5.3)	8.5%	—	Computrols Building Automation Software	24/5/2019	17/6/2026	Computrols CBAS 18.0.0 allows Username Enumeration.
CVE-2019-10847	Modificada	Alta (8.8)	2.4%	—	Computrols Building Automation Software	24/5/2019	17/6/2026	Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.
CVE-2019-10850	Modificada	Crítica (9.8)	1.9%	—	Computrols Building Automation Software	23/5/2019	17/6/2026	Computrols CBAS 18.0.0 has Default Credentials.
CVE-2019-10849	Modificada	Alta (7.5)	9.0%	—	Computrols Building Automation Software	23/5/2019	17/6/2026	Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.
CVE-2019-10855	Modificada	Alta (7.5)	1.00%	—	Computrols Building Automation Software	23/5/2019	17/6/2026	Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.
CVE-2019-10854	Modificada	Alta (8.8)	3.0%	—	Computrols Building Automation Software	23/5/2019	17/6/2026	Computrols CBAS 18.0.0 allows Authenticated Command Injection.
CVE-2019-10853	Modificada	Alta (8.1)	1.7%	—	Computrols Building Automation Software	23/5/2019	17/6/2026	Computrols CBAS 18.0.0 allows Authentication Bypass.
CVE-2019-10852	Modificada	Alta (8.8)	1.8%	—	Computrols Building Automation Software	23/5/2019	17/6/2026	Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring.
CVE-2019-10851	Modificada	Media (6.5)	0.65%	—	Computrols Building Automation Software	23/5/2019	17/6/2026	Computrols CBAS 18.0.0 has hard-coded encryption keys.