Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3026▼ 51 respecto a la semana anterior
Críticas / altas1412▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)385▼ 125 respecto a la semana anterior
–

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (6.5)2.2%—Brother Mfc-9970cdw Firmware5/2/202016/6/2026
Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackers to obtain sensitive information.
ModificadaAlta (7.5)2.4%—Brother Mfc-9970cdw Firmware4/2/202016/6/2026
Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information.
ModificadaAlta (7.5)2.6%—Brother Mfc-9970cdw Firmware3/2/202016/6/2026
Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers.
ModificadaMedia (6.8)0.51%—Brother Mfc-9970cdw Firmware3/2/202016/6/2026
Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access.
ModificadaAlta (7.5)1.7%—Brother Mfc-9970cdw Firmware3/2/202016/6/2026
Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.
ModificadaMedia (4.3)1.3%—Brother Mfc-9970cdw FirmwareBrother Mfc-9970cdw14/3/201416/6/2026
Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) val parameter to admin/admin_main.html; (3) id, (4) val, or (5) arbitrary parameter name (QUERY_STRING) to…
ModificadaMedia (4.3)2.0%—Brother Mfc-9970cdw FirmwareBrother Mfc-9970cdw14/3/201416/6/2026
Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name (QUERY_STRING) to admin/admin_main.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2671.
ModificadaMedia (4.3)2.0%—Brother Mfc-9970cdw FirmwareBrother Mfc-9970cdw14/3/201416/6/2026
Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/log_to_net.html or (2) kind parameter to fax/copy_settings.html, a different vulnerability than CVE-2013-2670 and…