Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2534▼ 399 respecto a la semana anterior

Críticas / altas1321▲ 41 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)96▼ 431 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2004-2426	Modificada	Media (5)	4.2%	—	Axis 2100 Network Camera Axis 2110 Network Camera Axis 2120 Network Camera Axis 2130 PTZ Network Camera+10	31/12/2004	16/6/2026	Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using…
CVE-2004-2427	Modificada	Alta (10)	5.4%	—	Axis 2100 Network Camera Axis 2110 Network Camera Axis 2120 Network Camera Axis 2130 PTZ Network Camera+10	31/12/2004	16/6/2026	Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.cgi, modify system information via (5) setparam.cgi and (6)…
CVE-2004-2425	Modificada	Alta (7.5)	14%	—	Axis 2100 Network Camera Axis 2110 Network Camera Axis 2120 Network Camera Axis 2130 PTZ Network Camera+10	31/12/2004	16/6/2026	Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi.
CVE-2000-0191	Modificada	Alta (10)	11%	—	Axis Storpoint CD	29/2/2000	16/6/2026	Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.