Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2737▼ 484 respecto a la semana anterior
Críticas / altas1302▼ 187 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (8.5) | 0.19% | — | Atheros Coex Service ApplicationAI | 27/1/2026 | 17/6/2026 | Atheros Coex Service Application 8.0.0.255 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path by placing malicious executables in the service path to gain elevated system privileges during service startup. | |
| Modificada | Crítica (9.2) | 0.78% | — | Heidenhain TNC 640 Programming StationHeidenhain Heros | 28/10/2022 | 17/6/2026 | The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5, is vulnerable to improper authentication in its DNC communication for CNC machines. Authentication is not enabled by default for DNC communication. This vulnerability may allow an attacker to deny service on the production line, steal sensitive data… | |
| Modificada | Media (5.4) | 0.46% | — | Qualcomm Atheros Ar9132 FirmwareQualcomm Atheros Ar9283 FirmwareQualcomm Atheros Ar9285 Firmware | 30/9/2020 | 17/6/2026 | A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8), AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an… | |
| Modificada | Media (5.5) | 1.1% | — | Netgear Wndap330 FirmwareAtheros Ar9160-bc1a Chipset | 12/11/2009 | 16/6/2026 | The Atheros wireless driver, as used in Netgear WNDAP330 Wi-Fi access point with firmware 2.1.11 and other versions before 3.0.3 on the Atheros AR9160-BC1A chipset, and other products, allows remote authenticated users to cause a denial of service (device reboot or hang) and possibly execute arbitrary code via a… | |
| Modificada | Alta (9.3) | 5.5% | 💥 Exploit | Heroshare Hero Super Player 3000 | 4/9/2009 | 16/6/2026 | Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504. | |
| Modificada | Media (6.8) | 2.5% | — | Herosoft Hero DVD Player | 9/10/2008 | 16/6/2026 | Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | |
| Modificada | Media (6.3) | 1.8% | — | Atheros Ar5416-ac1e ChipsetLinksys Wrt350n | 5/9/2008 | 16/6/2026 | The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly… |