Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3023▼ 71 respecto a la semana anterior
Críticas / altas1419▲ 54 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.30% | — | Relyum Rely-pcie FirmwareRelyum Rely-rec Firmware | 13/12/2023 | 17/6/2026 | Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF protection in the web interface. | |
| Modificada | Crítica (9.8) | 0.71% | — | Relyum Rely-pcie FirmwareRelyum Rely-rec Firmware | 13/12/2023 | 17/6/2026 | An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current password. | |
| Modificada | Alta (8.8) | 1.5% | — | Relyum Rely-pcie FirmwareRelyum Rely-rec Firmware | 13/12/2023 | 17/6/2026 | An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection through the web interface. | |
| Modificada | Media (6.1) | 0.41% | — | Relyum Rely-pcie FirmwareRelyum Rely-rec Firmware | 13/12/2023 | 17/6/2026 | An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. The web interfaces of the Relyum devices are susceptible to reflected XSS. | |
| Modificada | Media (5.9) | 0.49% | — | Relyum Rely-pcie FirmwareRelyum Rely-rec Firmware | 13/12/2023 | 17/6/2026 | An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. There is a Weak SMB configuration with signing disabled. | |
| Modificada | Alta (8.8) | 0.68% | — | Relyum Rely-pcie FirmwareRelyum Rely-rec Firmware | 13/12/2023 | 17/6/2026 | An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions. |