Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2564▼ 301 respecto a la semana anterior
Críticas / altas1351▲ 99 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 0.59% | — | Biges Vg-4c1a-lru FirmwareBiges Vg-4c1a-lrpu FirmwareBiges Vg-255a-bf FirmwareBiges Vg-255-bv Firmware+5 | 26/1/2024 | 17/6/2026 | Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C. | |
| Modificada | Alta (7.8) | 0.32% | — | Qvis DVR FirmwareQvis NVR Firmware | 18/7/2022 | 17/6/2026 | In QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the root user by abusing a Sudo misconfiguration. | |
| Modificada | Crítica (9.8) | 9.2% | — | Qvis DVR FirmwareQvis NVR Firmware | 18/7/2022 | 17/6/2026 | QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization. | |
| Modificada | Crítica (9.8) | 2.9% | — | Netvu Dv-ip Express FirmwareNetvu Sd-advanced - Sdhd FirmwareNetvu Sd-advanced 8/12/16 VGA FirmwareNetvu SD Advanced Closed Iptv (m3u) Firmware+16 | 6/2/2020 | 17/6/2026 | Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the vendor states "The… | |
| Modificada | Alta (8.1) | 0.91% | — | Dahuasecurity NVR Firmware | 9/3/2017 | 17/6/2026 | An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, is an unencrypted, binary protocol. Performing a Man-in-the-Middle attack allows both sniffing and injections of packets, which allows creation of fully privileged new… | |
| Modificada | Alta (8.1) | 60% | — | Dahuasecurity Camera FirmwareDahuasecurity NVR FirmwareDahuasecurity Smartpss Firmware | 27/2/2017 | 17/6/2026 | The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 allows remote attackers to obtain login access by leveraging knowledge of the MD5 Admin Hash without knowledge of the corresponding… | |
| Modificada | Crítica (9.8) | 13% | — | Dahuasecurity Camera FirmwareDahuasecurity NVR FirmwareDahuasecurity Smartpss Firmware | 27/2/2017 | 17/6/2026 | An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPSS Software is launched, while on the login screen, the software in the background automatically logs in as admin. This… | |
| Modificada | Media (5.9) | 8.9% | — | Dahuasecurity Camera FirmwareDahuasecurity NVR FirmwareDahuasecurity Smartpss Firmware | 27/2/2017 | 17/6/2026 | Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to requests from the Web Page, Mobile Application, and Desktop Application interfaces, which allows remote attackers to… |