Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 1.5% | — | Netis-systems Dl4343 Firmware | 30/12/2019 | 17/6/2026 | On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration). | |
| Modificada | Media (6.1) | 1.8% | — | Netis-systems Dl4343 Firmware | 30/12/2019 | 17/6/2026 | On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic). | |
| Modificada | Alta (8.8) | 1.4% | — | Netis-systems Dl4343 Firmware | 30/12/2019 | 17/6/2026 | On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page. | |
| Modificada | Media (6.1) | 1.8% | — | Netis-systems Dl4343 Firmware | 30/12/2019 | 17/6/2026 | On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration). | |
| Modificada | Media (6.1) | 1.5% | — | Netis-systems Dl4343 Firmware | 30/12/2019 | 17/6/2026 | On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration). | |
| Modificada | Media (6.5) | 0.77% | — | Netis-systems Dl4343 Firmware | 30/12/2019 | 17/6/2026 | On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs. | |
| Modificada | Media (6.1) | 1.4% | — | Netis-systems Dl4343 Firmware | 30/12/2019 | 17/6/2026 | On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration). |