Vulnerabilities
Summary — last 7 days
New vulnerabilities4,625▼ 675 vs. last week
Critical / high1,853▼ 1,198 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)728▲ 619 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (8.8) | 1.7% | — | Nip2 Project Nip2Debian Linux | 12/14/2017 | 6/17/2026 | boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that this product does not use the BROWSER environment variable | |
| Modified | High (10) | 9.5% | — | Schneider-electric Stbnic2212 FirmwareSchneider-electric Stbnip2212 FirmwareSchneider-electric Tsxetc0101 FirmwareSchneider-electric Tsxetc100 Firmware+39 | 10/3/2014 | 6/17/2026 | Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7,… | |
| Modified | Medium (6.5) | 3.5% | Exploit | Huawei ACUHuawei AR 19/29/49Huawei AR G3Huawei ATN+62 | 6/20/2013 | 6/16/2026 | The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500,… | |
| Modified | High (10) | 3.9% | — | Schneider-electric Quantum Ethernet Module 140cpu65150Schneider-electric Quantum Ethernet Module 140cpu65160Schneider-electric Quantum Ethernet Module 140cpu65260Schneider-electric Quantum Ethernet Module 140noe77100+17 | 12/17/2011 | 6/16/2026 | The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4)… |