KATALOG INFORMACJI
Wpisy CISA KEV, również starsze niż rok. Niski EPSS nie unieważnia potwierdzonego wykorzystania.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been…
Przepełnienie bufora w sterowniku audio Linuxa umożliwia eskalację uprawnień przez aplikację.
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a…
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting…
In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User…
Przechowywanie haseł w postaci niezaszyfrowanej w routerze D-Link DIR-300 umożliwia kradzież danych.
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
Obejście zabezpieczeń Mark of the Web w Windows umożliwia uruchomienie złośliwego kodu.
Windows User Profile Service Elevation of Privilege Vulnerability
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock descriptors. That is, when a device provides a bogus…
Luka XSS w Adobe Flash Player umożliwia zdalne wstrzykiwanie skryptów.
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Dereferencja wskaźnika null w Windows Remote Access Connection Manager umożliwia lokalne zablokowanie usługi.
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability.…
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been…
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or…
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.
Wykorzystanie po zwolnieniu pamięci w Windows Ancillary Function Driver dla WinSock umożliwia lokalne podniesienie uprawnień przez autoryzowanego…
Luka w izolacji w Junos OS pozwala lokalnemu atakującemu na kompromitację integralności urządzenia.
Błąd w Arista EOS pozwala na nieautoryzowane przetwarzanie tunelowanych pakietów.
Ujawnienie wrażliwych informacji w Desktop Windows Manager pozwala atakującemu na lokalne ujawnienie danych.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as… | The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025. |
Pilne działanie | 5,3 | 11,1 % | ||
| This issue was addressed by improved management of object lifetimes. | This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been… |
Pilne działanie | 6,1 | 7,08 % | ||
| Przepełnienie bufora w sterowniku audio Linuxa umożliwia eskalację uprawnień przez aplikację. | Przepełnienie bufora w sterowniku audio Linuxa umożliwia eskalację uprawnień przez aplikację. |
Pilne działanie | 7,2 | 1,5 % | ||
| A race condition was addressed with improved locking. | A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a… |
Pilne działanie | 7,0 | 2,22 % | ||
| A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated… | A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting… |
Pilne działanie | 7,2 | 1,21 % | ||
| In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to… | In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User… |
Pilne działanie | 7,3 | 0,71 % | ||
| Przechowywanie haseł w postaci niezaszyfrowanej w routerze D-Link DIR-300 umożliwia kradzież danych. | Przechowywanie haseł w postaci niezaszyfrowanej w routerze D-Link DIR-300 umożliwia kradzież danych. |
Pilne działanie | 6,8 | 3,06 % | ||
| Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to… | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page. |
Pilne działanie | 6,5 | 4,53 % | ||
| Obejście zabezpieczeń Mark of the Web w Windows umożliwia uruchomienie złośliwego kodu. | Obejście zabezpieczeń Mark of the Web w Windows umożliwia uruchomienie złośliwego kodu. |
Pilne działanie | 5,4 | 10,03 % | ||
| Windows User Profile Service Elevation of Privilege Vulnerability | Windows User Profile Service Elevation of Privilege Vulnerability |
Pilne działanie | 6,9 | 2,43 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock… | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock descriptors. That is, when a device provides a bogus… |
Pilne działanie | 7,1 | 1,35 % | ||
| Luka XSS w Adobe Flash Player umożliwia zdalne wstrzykiwanie skryptów. | Luka XSS w Adobe Flash Player umożliwia zdalne wstrzykiwanie skryptów. |
Pilne działanie | 6,1 | 6,19 % | ||
| Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary… | Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS. |
Pilne działanie | 6,5 | 4,18 % | ||
| Windows CNG Key Isolation Service Elevation of Privilege Vulnerability | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
Pilne działanie | 7,0 | 1,67 % | ||
| Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
Pilne działanie | 7,0 | 1,38 % | ||
| Dereferencja wskaźnika null w Windows Remote Access Connection Manager umożliwia lokalne zablokowanie usługi. | Dereferencja wskaźnika null w Windows Remote Access Connection Manager umożliwia lokalne zablokowanie usługi. |
Pilne działanie | 6,2 | 4,87 % | ||
| A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). | A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). |
Pilne działanie | 6,6 | 2,76 % | ||
| A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco… | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability.… |
Pilne działanie | 6,3 | 4,12 % | ||
| The issue was addressed with improved checks. | The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been… |
Pilne działanie | 7,0 | 0,49 % | ||
| A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow… | A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or… |
Pilne działanie | 6,6 | 2,48 % | ||
| Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to… | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. |
Pilne działanie | 6,1 | 4,95 % | ||
| Wykorzystanie po zwolnieniu pamięci w Windows Ancillary Function Driver dla WinSock umożliwia lokalne podniesienie uprawnień przez… | Wykorzystanie po zwolnieniu pamięci w Windows Ancillary Function Driver dla WinSock umożliwia lokalne podniesienie uprawnień przez autoryzowanego… |
Pilne działanie | 7,0 | 0,33 % | ||
| Luka w izolacji w Junos OS pozwala lokalnemu atakującemu na kompromitację integralności urządzenia. | Luka w izolacji w Junos OS pozwala lokalnemu atakującemu na kompromitację integralności urządzenia. |
Pilne działanie | 6,7 | 1,74 % | ||
| Błąd w Arista EOS pozwala na nieautoryzowane przetwarzanie tunelowanych pakietów. | Błąd w Arista EOS pozwala na nieautoryzowane przetwarzanie tunelowanych pakietów. |
Pilne działanie | 6,9 | 0,65 % | ||
| Ujawnienie wrażliwych informacji w Desktop Windows Manager pozwala atakującemu na lokalne ujawnienie danych. | Ujawnienie wrażliwych informacji w Desktop Windows Manager pozwala atakującemu na lokalne ujawnienie danych. |
Pilne działanie | 5,5 | 7,46 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.