Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2584▼ 301 respecto a la semana anterior
Críticas / altas1355▲ 100 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 1.3% | — | Microchip Syncserver S100 FirmwareMicrochip Syncserver S200 FirmwareMicrochip Syncserver S250 FirmwareMicrochip Syncserver S300 Firmware+1 | 17/2/2020 | 17/6/2026 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authlog.php. | |
| Modificada | Media (6.5) | 1.1% | — | Microchip Syncserver S100 FirmwareMicrochip Syncserver S200 FirmwareMicrochip Syncserver S250 FirmwareMicrochip Syncserver S300 Firmware+1 | 17/2/2020 | 17/6/2026 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to kernlog.php. | |
| Modificada | Media (6.5) | 1.1% | — | Microchip Syncserver S100 FirmwareMicrochip Syncserver S200 FirmwareMicrochip Syncserver S250 FirmwareMicrochip Syncserver S300 Firmware+1 | 17/2/2020 | 17/6/2026 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to daemonlog.php. | |
| Modificada | Media (6.5) | 1.1% | — | Microchip Syncserver S100 FirmwareMicrochip Syncserver S200 FirmwareMicrochip Syncserver S250 FirmwareMicrochip Syncserver S300 Firmware+1 | 17/2/2020 | 17/6/2026 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php. | |
| Modificada | Media (6.5) | 1.2% | — | Microchip Syncserver S100 FirmwareMicrochip Syncserver S200 FirmwareMicrochip Syncserver S250 FirmwareMicrochip Syncserver S300 Firmware+1 | 17/2/2020 | 17/6/2026 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php. | |
| Modificada | Media (6.1) | 0.67% | — | Microchip Syncserver S100 FirmwareMicrochip Syncserver S200 FirmwareMicrochip Syncserver S250 FirmwareMicrochip Syncserver S300 Firmware+1 | 17/2/2020 | 17/6/2026 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow stored XSS via the newUserName parameter on the "User Creation, Deletion and Password Maintenance" screen (when creating a new user). | |
| Modificada | Alta (7.5) | 0.91% | — | Microchip Syncserver S100 FirmwareMicrochip Syncserver S200 FirmwareMicrochip Syncserver S250 FirmwareMicrochip Syncserver S300 Firmware+1 | 17/2/2020 | 17/6/2026 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification, or elimination of users. |