Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2568▼ 331 respecto a la semana anterior

Críticas / altas1352▲ 94 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-14814	Modificada	Media (6.5)	1.5%	—	We-con PI Studio We-con PI Studio HMI	27/3/2019	17/6/2026	WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object.
CVE-2018-17889	Modificada	Media (5.3)	1.2%	—	We-con PI Studio We-con PI Studio HMI	8/10/2018	17/6/2026	In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure.
CVE-2018-14818	Modificada	Crítica (9.8)	3.5%	—	We-con PI Studio We-con PI Studio HMI	8/10/2018	17/6/2026	WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability which may allow remote code execution.
CVE-2018-14810	Modificada	Alta (8.8)	1.7%	—	We-con PI Studio We-con PI Studio HMI	8/10/2018	17/6/2026	WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator.
CVE-2018-7527	Modificada	Media (5.3)	0.72%	—	We-con Levistudio HMI Editor We-con Levistudiou We-con PI Studio HMI Project Programmer	26/4/2018	17/6/2026	A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file.