Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2817▼ 183 respecto a la semana anterior

Críticas / altas1372▲ 48 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-40705	Modificada	Media (5.4)	0.44%	—	I-pro Video Insight	5/9/2023	17/6/2026	Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script.
CVE-2023-40535	Modificada	Media (5.4)	0.44%	—	I-pro Video Insight	5/9/2023	17/6/2026	Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script.
CVE-2023-39938	Modificada	Media (6.1)	0.51%	—	I-pro Video Insight	5/9/2023	17/6/2026	Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitrary script.
CVE-2023-38574	Modificada	Media (6.1)	0.50%	—	I-pro Video Insight	5/9/2023	17/6/2026	Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.
CVE-2021-20623	Modificada	Crítica (9.8)	2.8%	—	Panasonic Video Insight VMS	5/2/2021	17/6/2026	Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a specially crafted request.
CVE-2019-5997	Modificada	Crítica (9.8)	1.7%	—	Panasonic Video Insight VMS	20/5/2020	17/6/2026	Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspecified vectors.
CVE-2019-5996	Modificada	Alta (8.8)	1.5%	—	Panasonic Video Insight VMS	12/9/2019	17/6/2026	SQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2017-5151	Modificada	Alta (7.3)	2.4%	—	Panasonic Video Insight WEB Client	13/2/2017	17/6/2026	An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerability has been identified, which may allow remote code execution.