Vulnerabilities
Summary — last 7 days
New vulnerabilities5,279▲ 2,571 vs. last week
Critical / high2,962▲ 1,655 vs. last week
New active exploitation (KEV)6▼ 2 vs. last week
Unscored (no CVSS)242▲ 69 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.9) | 0.38% | — | Ls-electric Xg5000Ls-electric Xgk-cpuun FirmwareLs-electric Xgk-cpuhn FirmwareLs-electric Xgk-cpusn Firmware+231 | 8/31/2022 | 6/17/2026 | Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 software prior to V4.0 and LS Electric PLCs: all versions of XGK-CPUU/H/A/S/E prior to V3.50, all versions of XGI-CPUU/UD/H/S/E prior to V3.20, all versions of… | |
| Modified | High (8.8) | 2.9% | — | Gocloud S2A WL FirmwareGocloud S2A FirmwareGocloud S3A K2P MTK FirmwareGocloud S3A Firmware+1 | 2/12/2020 | 6/17/2026 | Gocloud S2A_WL 4.2.7.16471, S2A 4.2.7.17278, S2A 4.3.0.15815, S2A 4.3.0.17193, S3A K2P MTK 4.2.7.16528, S3A 4.3.0.16572, and ISP3000 4.3.0.17190 devices allows remote attackers to execute arbitrary OS commands via shell metacharacters in a ping operation, as demonstrated by the… |