Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-26978	Modificada	Media (6.1)	0.57%	—	Barco Control Room Management Suite	2/6/2022	17/6/2026	Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username parameters is not correctly sanitized, leading to reflected XSS.
CVE-2022-26977	Modificada	Media (6.1)	0.57%	—	Barco Control Room Management Suite	2/6/2022	17/6/2026	Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization of the upload mechanism is leads to stored XSS.
CVE-2022-26976	Modificada	Media (5.4)	0.45%	—	Barco Control Room Management Suite	2/6/2022	17/6/2026	Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization in the upload mechanism is leads to reflected XSS.
CVE-2022-26975	Modificada	Alta (7.5)	1.0%	—	Barco Control Room Management Suite	2/6/2022	17/6/2026	Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.
CVE-2022-26974	Modificada	Media (6.1)	0.57%	—	Barco Control Room Management Suite	2/6/2022	17/6/2026	Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of input sanitization in the upload mechanism leads to reflected XSS.
CVE-2022-26973	Modificada	Media (5.3)	0.77%	—	Barco Control Room Management Suite	2/6/2022	17/6/2026	Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the license file name, the returned error message exposes internal directory path details.
CVE-2022-26972	Modificada	Media (6.1)	0.57%	—	Barco Control Room Management Suite	2/6/2022	17/6/2026	Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS.
CVE-2022-26971	Modificada	Media (5.3)	0.73%	—	Barco Control Room Management Suite	2/6/2022	17/6/2026	Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This upload can be executed without authentication.
CVE-2022-26233	Modificada	Alta (7.5)	15%	💥 Exploit	Barco Control Room Management Suite	3/4/2022	17/6/2026	Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /..\.." substring.