Dotkliwość: Krytyczna

Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code.

Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a…

Podatność w Microsoft Exchange Server umożliwia eskalację uprawnień.

Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the…

D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.

Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.

Obejście uwierzytelnienia w FortiOS umożliwia nieautoryzowanym atakującym dostęp do interfejsu administracyjnego.

Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape…

Luka w Zimbra Collaboration pozwala na przesyłanie dowolnych plików, co prowadzi do nieautoryzowanego dostępu do kont użytkowników.

A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.

Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed.

Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files.…

D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or…

Obejście uwierzytelnienia w Zimbra Collaboration Suite pozwala na zdalne wykonanie kodu.

Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into…

Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution.

dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the…

Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.

Wykorzystanie protokołu URL w MSDT w Wordzie umożliwia zdalne wykonanie kodu.

SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server.

A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable…

An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for…

Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.

Błędna walidacja danych w Mitel MiVoice Connect umożliwia zdalne wykonanie kodu.

Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.