Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection.
This issue affects TR7 ASP: from 1.0.40.236…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,7 % · rekomendacja wg zapisanej polityki
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP form element is vulnerable to the execution of user provided codes.
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitrary code execution.This could cause high impact on confidentiality integrity and availability of the system.
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection.
This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,68 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure,…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection.
This issue affects TR7 ASP: from 1.0.40.236…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,7 % · rekomendacja wg zapisanej polityki
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP form element is vulnerable to the execution of user provided codes.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitrary code execution.This could cause high impact on confidentiality integrity and availability of the system.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection.
This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,68 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,66 % · rekomendacja wg zapisanej polityki