Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2882▼ 181 respecto a la semana anterior
Críticas / altas1279▼ 60 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.5) | 0.43% | — | Unitronics Unilogic | 18/3/2024 | 17/6/2026 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside Device's Firmware | |
| Analizada | Alta (8.8) | 0.36% | — | Unitronics Unilogic | 18/3/2024 | 17/6/2026 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE | |
| Analizada | Alta (8.8) | 1.7% | — | Unitronics Unilogic | 18/3/2024 | 17/6/2026 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE | |
| Analizada | Alta (8.8) | 0.81% | — | Unitronics Unilogic | 18/3/2024 | 17/6/2026 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE | |
| Analizada | Alta (8.8) | 0.79% | — | Unitronics Unilogic | 18/3/2024 | 17/6/2026 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal | |
| Analizada | Alta (8.8) | 0.71% | — | Unitronics Unilogic | 18/3/2024 | 17/6/2026 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership Over Devices | |
| Analizada | Crítica (9.8) | 0.85% | — | Unitronics Unilogic | 18/3/2024 | 17/6/2026 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE | |
| Analizada | Crítica (9.8) | 0.69% | — | Unitronics Unilogic | 18/3/2024 | 17/6/2026 | CWE-287: Improper Authentication may allow Authentication Bypass |