Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
–

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.5)4.2%—Dlink Dwr-932b Firmware30/1/201717/6/2026
An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules.
ModificadaAlta (7.5)4.2%—Dlink Dwr-932b Firmware30/1/201717/6/2026
An issue was discovered on the D-Link DWR-932B router. A secure_mode=no line exists in /var/miniupnpd.conf.
ModificadaAlta (7.5)5.6%—Dlink Dwr-932b Firmware30/1/201717/6/2026
An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal.
ModificadaAlta (7.5)5.6%—Dlink Dwr-932b Firmware30/1/201717/6/2026
An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal.
ModificadaCrítica (9.8)8.7%—Dlink Dwr-932b Firmware30/1/201717/6/2026
An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters.
ModificadaAlta (7.5)3.9%—Dlink Dwr-932b Firmware30/1/201717/6/2026
An issue was discovered on the D-Link DWR-932B router. qmiweb provides sensitive information for CfgType=get_homeCfg requests.
ModificadaAlta (7.5)4.4%—Dlink Dwr-932b Firmware30/1/201717/6/2026
An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.
ModificadaAlta (7.5)4.9%—Dlink Dwr-932b Firmware30/1/201717/6/2026
An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607.
ModificadaCrítica (9.8)7.3%—Dlink Dwr-932b Firmware30/1/201717/6/2026
An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/sh" command.
ModificadaCrítica (9.8)6.9%—Dlink Dwr-932b Firmware30/1/201717/6/2026
An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin and root with the password 1234.
Orbitaley — Vulnerabilidades