KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Wykonanie kodu zdalnego w JetBrains IntelliJ IDEA umożliwia przejście przez ścieżkę w identyfikacji workspace.
Luka w Oracle WebCenter Content pozwala na przejęcie kontroli przez nieautoryzowanego atakującego.
Wykorzystanie podatności w aplikacji Stackfield umożliwia zapis dowolnych danych w systemie ofiary.
Błąd zapisu poza granicami w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu lub denial of service.
Luka w Oracle Hyperion umożliwia zdalne przejęcie kontroli przez nieautoryzowanego atakującego.
RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service on 127.0.0.1:51900 with --rc-no-auth, --rc-allow-origin *, and --rc-serve. A malicious web page opened by a user while the…
Nieprawidłowa walidacja pochodzenia w MLflow pozwala na zdalne wykonanie poleceń.
Błąd w OpenDJ pozwala na nieautoryzowane przejęcie tożsamości przez użytkowników z PROXIED_AUTH.
Błąd w containerd umożliwia obejście przydziału zasobów w Kubernetes przez nieautoryzowane modyfikacje.
Brak potwierdzenia logowania w OpenBao umożliwia atakującemu phishing zdalny.
Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via… | Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,42 % | ||
| Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template… | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
W tym tygodniu | 9,6 | 0,42 % | ||
| Wykonanie kodu zdalnego w JetBrains IntelliJ IDEA umożliwia przejście przez ścieżkę w identyfikacji workspace. | Wykonanie kodu zdalnego w JetBrains IntelliJ IDEA umożliwia przejście przez ścieżkę w identyfikacji workspace. |
W tym tygodniu | 9,6 | 0,42 % | ||
| Luka w Oracle WebCenter Content pozwala na przejęcie kontroli przez nieautoryzowanego atakującego. | Luka w Oracle WebCenter Content pozwala na przejęcie kontroli przez nieautoryzowanego atakującego. |
W tym tygodniu | 9,6 | 0,42 % | ||
| Wykorzystanie podatności w aplikacji Stackfield umożliwia zapis dowolnych danych w systemie ofiary. | Wykorzystanie podatności w aplikacji Stackfield umożliwia zapis dowolnych danych w systemie ofiary. |
Pilne działanie | 9,6 | 0,42 % | ||
| Błąd zapisu poza granicami w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu lub denial of service. | Błąd zapisu poza granicami w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu lub denial of service. |
W tym tygodniu | 9,6 | 0,42 % | ||
| Luka w Oracle Hyperion umożliwia zdalne przejęcie kontroli przez nieautoryzowanego atakującego. | Luka w Oracle Hyperion umożliwia zdalne przejęcie kontroli przez nieautoryzowanego atakującego. |
W tym tygodniu | 9,6 | 0,42 % | ||
| RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. | RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service on 127.0.0.1:51900 with --rc-no-auth, --rc-allow-origin *, and --rc-serve. A malicious web page opened by a user while the… |
W tym tygodniu | 9,6 | 0,42 % | ||
| Nieprawidłowa walidacja pochodzenia w MLflow pozwala na zdalne wykonanie poleceń. | Nieprawidłowa walidacja pochodzenia w MLflow pozwala na zdalne wykonanie poleceń. |
Pilne działanie | 9,6 | 0,41 % | ||
| Błąd w OpenDJ pozwala na nieautoryzowane przejęcie tożsamości przez użytkowników z PROXIED_AUTH. | Błąd w OpenDJ pozwala na nieautoryzowane przejęcie tożsamości przez użytkowników z PROXIED_AUTH. |
W tym tygodniu | 9,6 | 0,41 % | ||
| Błąd w containerd umożliwia obejście przydziału zasobów w Kubernetes przez nieautoryzowane modyfikacje. | Błąd w containerd umożliwia obejście przydziału zasobów w Kubernetes przez nieautoryzowane modyfikacje. |
W tym tygodniu | 9,6 | 0,41 % | ||
| Brak potwierdzenia logowania w OpenBao umożliwia atakującemu phishing zdalny. | Brak potwierdzenia logowania w OpenBao umożliwia atakującemu phishing zdalny. |
W tym tygodniu | 9,6 | 0,41 % | ||
| Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a… | Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,41 % | ||
| IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path… | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. |
W tym tygodniu | 9,6 | 0,41 % | ||
| Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary… | Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
W tym tygodniu | 9,6 | 0,41 % | ||
| Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside… | Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,4 % | ||
| Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary… | Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,4 % | ||
| Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the… | Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,4 % | ||
| Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary… | Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
W tym tygodniu | 9,6 | 0,4 % | ||
| Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,4 % | ||
| Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary… | Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,4 % | ||
| Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary… | Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,4 % | ||
| Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside… | Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
W tym tygodniu | 9,6 | 0,4 % | ||
| Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,4 % | ||
| Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,4 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.