Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2882▼ 181 respecto a la semana anterior
Críticas / altas1279▼ 60 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.5) | 0.40% | — | Huawei Oxfords-an00a Firmware | 3/8/2021 | 17/6/2026 | Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify specific parameters, causing the system to crash. Affected product include:OxfordS-AN00A… | |
| Modificada | Media (4.6) | 0.21% | — | Huawei Mate 20 FirmwareHuawei Mate 20 PRO FirmwareHuawei Hima-l29c FirmwareHuawei Laya-al00ep Firmware+2 | 13/7/2021 | 17/6/2026 | There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname.… | |
| Modificada | Media (5.5) | 0.24% | — | Huawei Honor 20 PRO FirmwareHuawei Honor View 20 FirmwareHuawei Oxfords-an00a FirmwareHuawei Princeton-al10b Firmware+6 | 3/9/2020 | 17/6/2026 | Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.212(C432E10R3P4),Versions earlier than 10.1.0.213(C636E3R4P3),Versions earlier… | |
| Modificada | Media (5.5) | 0.25% | — | Huawei Oxfords-an00a Firmware | 20/3/2020 | 17/6/2026 | Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some… |