Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
–

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (6.1)0.77%—Buffalotech Wmr-300 FirmwareBuffalotech Wex-300 FirmwareBuffalotech Wmr-433 FirmwareBuffalotech Bhr-4grv2 Firmware+422/1/201617/6/2026
Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices…
ModificadaAlta (8.8)0.54%—Buffalotech Whr-1166dhp FirmwareBuffalotech Whr-300hp2 FirmwareBuffalotech Wmr-300 FirmwareBuffalotech Bhr-4grv2 Firmware+422/1/201617/6/2026
Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300…
ModificadaAlta (7.7)1.1%—Buffalotech Wsr-600dhp FirmwareBuffalotech Whr-300hp2 FirmwareBuffalotech Whr-1166dhp FirmwareBuffalotech Bhr-4grv2 Firmware+39/6/201517/6/2026
The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP2 1.60 and earlier, WMR-300 1.60 and earlier, WEX-300 1.60 and earlier, and BHR-4GRV2 1.04 and earlier routers allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.
Orbitaley — Vulnerabilidades