Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2570▼ 302 respecto a la semana anterior

Críticas / altas1352▲ 100 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-42707	Modificada	Alta (7.8)	0.97%	—	We-con PLC Editor	22/11/2021	17/6/2026	PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.
CVE-2021-42705	Modificada	Alta (7.8)	1.0%	—	We-con PLC Editor	22/11/2021	17/6/2026	PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code.
CVE-2020-25181	Modificada	Alta (8.8)	2.1%	—	We-con PLC Editor	1/12/2020	17/6/2026	WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution.
CVE-2020-25177	Modificada	Alta (8.8)	1.8%	—	We-con PLC Editor	1/12/2020	17/6/2026	WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may allow arbitrary code execution.
CVE-2019-18236	Modificada	Alta (7.8)	2.8%	—	We-con PLC Editor	23/12/2019	17/6/2026	Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
CVE-2019-13522	Modificada	Alta (7.8)	1.4%	—	Ezautomation EZ PLC Editor	4/9/2019	17/6/2026	An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior.
CVE-2018-14792	Modificada	Media (6.3)	1.3%	—	We-con PLC Editor	19/9/2018	17/6/2026	WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.