KATALOG INFORMACJI
Wpisy CISA KEV, również starsze niż rok. Niski EPSS nie unieważnia potwierdzonego wykorzystania.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer…
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively…
Luka w Windows Common Log File System Driver umożliwia eskalację uprawnień.
Przepełnienie całkowitej liczby w funkcji fb_mmap w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień.
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the…
Lokalna luka w GDI w systemach Windows umożliwia eskalację uprawnień przez złośliwą aplikację.
Luka w Windows CNG umożliwia eskalację uprawnień do systemu.
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
Luka w VMware ESXi pozwala na dowolne zapisywanie, co może prowadzić do ucieczki z piaskownicy.
Wykorzystanie luki w Microsoft Office Access Connectivity Engine umożliwia zdalne wykonanie kodu.
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive…
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges.
Błąd w LiteLLM umożliwia atakującym dostęp do narzędzi MCP bez ważnego klucza.
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service
In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_cache, then call…
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first…
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. | eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows. |
Pilne działanie | 7,5 | 4,93 % | ||
| In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in… | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer… |
Pilne działanie | 7,8 | 3,4 % | ||
| An out-of-bounds write issue was addressed with improved bounds checking. | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively… |
Pilne działanie | 7,8 | 3,29 % | ||
| Luka w Windows Common Log File System Driver umożliwia eskalację uprawnień. | Luka w Windows Common Log File System Driver umożliwia eskalację uprawnień. |
Pilne działanie | 7,8 | 3,28 % | ||
| Przepełnienie całkowitej liczby w funkcji fb_mmap w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień. | Przepełnienie całkowitej liczby w funkcji fb_mmap w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień. |
Pilne działanie | 7,8 | 3,21 % | ||
| A memory corruption issue was addressed by removing the vulnerable code. | A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges. |
Pilne działanie | 7,8 | 3,2 % | ||
| In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. | In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android… |
Pilne działanie | 7,8 | 3,15 % | ||
| An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB… | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821. |
Pilne działanie | 6,5 | 9,64 % | ||
| A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). | A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the… |
Pilne działanie | 8,4 | 0,14 % | ||
| Lokalna luka w GDI w systemach Windows umożliwia eskalację uprawnień przez złośliwą aplikację. | Lokalna luka w GDI w systemach Windows umożliwia eskalację uprawnień przez złośliwą aplikację. |
Pilne działanie | 7,8 | 3,11 % | ||
| Luka w Windows CNG umożliwia eskalację uprawnień do systemu. | Luka w Windows CNG umożliwia eskalację uprawnień do systemu. |
Pilne działanie | 7,8 | 3,05 % | ||
| An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of… | An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. |
Pilne działanie | 7,8 | 3,02 % | ||
| Luka w VMware ESXi pozwala na dowolne zapisywanie, co może prowadzić do ucieczki z piaskownicy. | Luka w VMware ESXi pozwala na dowolne zapisywanie, co może prowadzić do ucieczki z piaskownicy. |
Pilne działanie | 8,2 | 1,02 % | ||
| Wykorzystanie luki w Microsoft Office Access Connectivity Engine umożliwia zdalne wykonanie kodu. | Wykorzystanie luki w Microsoft Office Access Connectivity Engine umożliwia zdalne wykonanie kodu. |
Pilne działanie | 6,8 | 7,99 % | ||
| there is a possible way to bypass due to a logic error in the code. | there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. |
Pilne działanie | 7,8 | 2,99 % | ||
| Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on… | Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive… |
Pilne działanie | 7,8 | 2,94 % | ||
| A buffer overflow issue was addressed with improved memory handling. | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges. |
Pilne działanie | 7,8 | 2,92 % | ||
| Błąd w LiteLLM umożliwia atakującym dostęp do narzędzi MCP bez ważnego klucza. | Błąd w LiteLLM umożliwia atakującym dostęp do narzędzi MCP bez ważnego klucza. |
Pilne działanie | 8,2 | 0,84 % | ||
| Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service |
Pilne działanie | 8,1 | 1,3 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does… | In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_cache, then call… |
Pilne działanie | 7,8 | 2,7 % | ||
| A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate… | A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first… |
Pilne działanie | 7,8 | 2,67 % | ||
| Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,8 | 2,66 % | ||
| In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. | In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
Pilne działanie | 7,8 | 2,61 % | ||
| A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate… | A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755 |
Pilne działanie | 7,0 | 6,59 % | ||
| In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the… | In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. |
Pilne działanie | 7,5 | 4,01 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.