Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior
Críticas / altas1381▼ 36 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (6.1)0.26%—Planex Cs-qr10 FirmwarePlanex Cs-qr20 FirmwarePlanex Cs-qr22 FirmwarePlanex Cs-qr220 Firmware+126/9/202417/6/2026
Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user.
ModificadaMedia (6.8)0.37%—Planex Cs-qr20 FirmwarePlanex Cs-qr10 Firmware8/9/202217/6/2026
Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product's specific serial connection
ModificadaCrítica (9.8)1.5%—Planex Cs-qr20 FirmwarePlanex Smacam Night Vision24/8/201817/6/2026
An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin:password") is used in the Android application that allows attackers to use a hidden API URL "/goform/SystemCommand" to execute any command with root permission.
ModificadaAlta (7.2)2.2%—Planex Cs-qr20 Firmware24/8/201817/6/2026
An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. The management page was used for debugging purposes, once you login and access the page directly (/admin/system_command.asp), you can…
Orbitaley — Vulnerabilidades