CVE Intelligence

Vulnerabilidades de Nec

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Nec: 9 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-8797 Alta · 8.5 CWE-782 26/06/2026
An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If…
An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.
CVE-2026-4622 Crítica · 9.8 CWE-78 27/03/2026
OS Command Injection em Nec Aterm Wg2600hs Firmware
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
CVE-2026-4621 Média · 5.6 CWE-912 27/03/2026
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker…
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.
CVE-2026-4620 Crítica · 9.8 CWE-78 27/03/2026
OS Command Injection em Nec Aterm Wx3600hp Firmware
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
CVE-2026-4619 Crítica · 9.8 CWE-22 27/03/2026
Path Traversal em Nec Aterm Wx3600hp Firmware
Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.
CVE-2026-4309 Média · 6.5 CWE-862 27/03/2026
Missing Authorization em Nec Aterm Wg2600hs Firmware
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
CVE-2025-12852 Alta · 8.4 CWE-427 18/11/2025
Uncontrolled Search Path Element em Nec RakurakuMusen Start EX
DLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All Verisons allows a attacker to manipulate the PC environment to cause unintended operations on the user's device.
CVE-2025-11546 Crítica · 9.3 CWE-78 06/11/2025
OS Command Injection em Nec CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux)
CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends specially crafted network packets to the product, arbitrary OS commands may be executed without authentication.
CVE-1999-0024 Média · 5.0 13/08/1997
DNS cache poisoning via BIND, by predictable query IDs.
DNS cache poisoning via BIND, by predictable query IDs.