Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior
Críticas / altas1270▼ 74 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior
–

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (5.3)0.87%—Lexmark X860 FirmwareLexmark X862 FirmwareLexmark X864 FirmwareLexmark X734 Firmware+299/3/202016/6/2026
Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.
ModificadaAlta (7.5)1.1%—Lexmark X950 FirmwareLexmark X952 FirmwareLexmark X954 FirmwareLexmark X940e Firmware+809/3/202016/6/2026
Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut.
ModificadaAlta (7.5)3.9%—Ovislink Airlive Poe2600hd Firmware11/12/201916/6/2026
AirLive POE-2600HD allows remote attackers to cause a denial of service (device reset) via a long URL.
ModificadaAlta (7.8)2.5%—Ovislink Airlive Od-2025hdOvislink Airlive Od-2060hdOvislink Airlive Poe100hdOvislink Airlive Poe200hd+211/10/201316/6/2026
AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file.
ModificadaMedia (6.8)0.97%—Ovislink Airlive Od-2025hdOvislink Airlive Od-2060hdOvislink Airlive Poe100hdOvislink Airlive Poe200hd+24/10/201316/6/2026
Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.
ModificadaAlta (7.8)1.2%—Lexmark 25xxnLexmark C510Lexmark C52xLexmark C53x+574/5/201016/6/2026
The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header.