Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 15% | 💥 Exploit | Teracue Enc-400 Hdmi FirmwareTeracue Enc-400 Hdmi2 FirmwareTeracue Enc-400 Hdsdi Firmware | 21/3/2019 | 17/6/2026 | An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. While the web interface requires authentication before it can be interacted with, a large portion of the HTTP endpoints are missing authentication. An attacker is able to view these pages before being authenticated, and some of these… | |
| Modificada | Alta (8.1) | 15% | 💥 Exploit | Teracue Enc-400 Hdmi FirmwareTeracue Enc-400 Hdmi2 FirmwareTeracue Enc-400 Hdsdi Firmware | 21/3/2019 | 17/6/2026 | An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful authentication, the device sends an authentication cookie to the end user such that they can access the devices web administration panel. This token is hard-coded to a string in the source code (/usr/share/www/check.lp… | |
| Modificada | Crítica (9.8) | 11% | 💥 Exploit | Teracue Enc-400 Hdmi FirmwareTeracue Enc-400 Hdmi2 FirmwareTeracue Enc-400 Hdsdi Firmware | 21/3/2019 | 17/6/2026 | An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. The login form passes user input directly to a shell command without any kind of escaping or validation in /usr/share/www/check.lp file. An attacker is able to perform command injection using the "password" parameter in the login form. |