CVE Program partner

NEC

NEC Corporation

API
CVEs, 365 days1867 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationNEC Corporation
RoleCNA
TypeVendor
Reports tojpcert → mitre
ScopeNEC issues only.
Advisorieshttps://jpn.nec.com/security-info/index.html

Latest CVEs · RSS

  • CVE-2026-16876 2026-09-07 · CVSS 9.3
    An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands
  • CVE-2026-8797 2026-06-26 · CVSS 8.5
    An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be e
  • CVE-2026-8652 2026-05-25 · CVSS 8.5
    An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to
  • CVE-2026-6059 2026-05-25 · CVSS 4.8
    A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via
  • CVE-2026-4620 2026-03-27 · CVSS 7.1
    OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
  • CVE-2026-4622 2026-03-27 · CVSS 7.1
    OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
  • CVE-2026-4621 2026-03-27 · CVSS 6.3
    Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.
  • CVE-2026-4619 2026-03-27 · CVSS 6.0
    Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.
  • CVE-2026-4309 2026-03-27 · CVSS 6.3
    Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via netwo
  • CVE-2025-11545 2025-12-22 · CVSS 9.5
    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sharp Display Solutions projectors allows a attacker may improperly
  • CVE-2025-11544 2025-12-22 · CVSS 9.5
    Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware.
  • CVE-2025-11543 2025-12-22 · CVSS 9.5
    Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware.
  • CVE-2025-11542 2025-12-22 · CVSS 8.4
    Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute arbitrary commands and programs.
  • CVE-2025-11541 2025-12-22 · CVSS 9.2
    Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute arbitrary commands and programs.
  • CVE-2025-11540 2025-12-22 · CVSS 9.1
    Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector.
  • CVE-2025-12049 2025-12-22 · CVSS 9.2
    Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web in
  • CVE-2025-12852 2025-11-19 · CVSS 8.4
    DLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All Verisons allows a attacker to manipulate the PC environment to cause unintended operatio
  • CVE-2025-11546 2025-11-07 · CVSS 9.3
    CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4
  • CVE-2025-8153 2025-09-17 · CVSS 5.1
    Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, fr
  • CVE-2024-6466 2025-01-21
    NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not
  • CVE-2025-0356 2025-01-15 · CVSS 7.2
    NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier allows a attacker to execute arbitrary OS commands via the network.
  • CVE-2025-0355 2025-01-15 · CVSS 7.5
    Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS V
  • CVE-2025-0354 2025-01-15 · CVSS 4.8
    Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG
  • CVE-2024-11014 2024-11-29 · CVSS 4.3
    Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27 and for Ver10.9 up to Ve
  • CVE-2024-11013 2024-11-29 · CVSS 7.2
    Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVER

All CVE Program partners