Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2571▼ 296 respecto a la semana anterior

Críticas / altas1355▲ 107 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

14 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-36228	Modificada	Media (6.5)	0.30%	—	Janusintl Noke Standard Smart Padlock Firmware Janusintl Noke HD Smart Padlock Firmware Janusintl Noke HD+ Smart Padlock Firmware	9/10/2023	17/6/2026	Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app.
CVE-2021-4124	Modificada	Media (6.1)	0.94%	—	Meetecho Janus	16/12/2021	17/6/2026	janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4020	Modificada	Media (5.4)	0.84%	—	Meetecho Janus	27/11/2021	17/6/2026	janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-14034	Modificada	Crítica (9.8)	2.3%	—	Meetecho Janus	15/6/2020	17/6/2026	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_get_codec_from_pt in utils.c has a Buffer Overflow via long value in an SDP Offer packet.
CVE-2020-14033	Modificada	Crítica (9.8)	1.9%	—	Meetecho Janus	15/6/2020	17/6/2026	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_streaming_rtsp_parse_sdp in plugins/janus_streaming.c has a Buffer Overflow via a crafted RTSP server.
CVE-2020-13901	Modificada	Crítica (9.8)	2.6%	—	Meetecho Janus	10/6/2020	17/6/2026	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflow.
CVE-2020-13900	Modificada	Alta (7.5)	2.4%	—	Meetecho Janus	10/6/2020	17/6/2026	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference.
CVE-2020-13899	Modificada	Alta (7.5)	2.1%	—	Meetecho Janus	10/6/2020	17/6/2026	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory.
CVE-2020-13898	Modificada	Alta (7.5)	2.3%	—	Meetecho Janus	10/6/2020	17/6/2026	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference.
CVE-2020-10577	Modificada	Media (4.8)	0.47%	—	Meetecho Janus	14/3/2020	17/6/2026	An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions.
CVE-2020-10576	Modificada	Media (5.9)	0.65%	—	Meetecho Janus	14/3/2020	17/6/2026	An issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin has a race condition that could cause a server crash.
CVE-2020-10575	Modificada	Media (4.2)	0.47%	—	Meetecho Janus	14/3/2020	17/6/2026	An issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin mishandles session management because a race condition causes some references to be freed too early or too many times.
CVE-2020-10574	Modificada	Crítica (9.8)	1.4%	—	Meetecho Janus	14/3/2020	17/6/2026	An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON validation.
CVE-2020-10573	Modificada	Alta (7.5)	0.97%	—	Meetecho Janus	14/3/2020	17/6/2026	An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private rooms in AudioBridge.