Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by…
Opis źródłowy NVD · ENCVSS 9,5 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 1,42 % · rekomendacja wg zapisanej polityki
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.
Opis źródłowy NVD · ENCVSS 9,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Budibase versions before 3.41.3 contain a remote code execution vulnerability in plugin handling that allows authenticated admin users to execute arbitrary code by uploading a malicious plugin tarball. The server calls eval() on plugin JavaScript files without sandboxing in the main Node.js…
Opis źródłowy NVD · ENCVSS 9,4 · EPSS 0,89 % · rekomendacja wg zapisanej polityki
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 1,37 % · rekomendacja wg zapisanej polityki
Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server.
Opis źródłowy NVD · ENCVSS 9,5 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server.
Opis źródłowy NVD · ENCVSS 9,5 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 1,34 % · rekomendacja wg zapisanej polityki
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Opis źródłowy NVD · ENCVSS 9,4 · EPSS 0,83 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,5 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 1,42 % · rekomendacja wg zapisanej polityki
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Budibase versions before 3.41.3 contain a remote code execution vulnerability in plugin handling that allows authenticated admin users to execute arbitrary code by uploading a malicious plugin tarball. The server calls eval() on plugin JavaScript files without sandboxing in the main Node.js…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,4 · EPSS 0,89 % · rekomendacja wg zapisanej polityki
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 1,37 % · rekomendacja wg zapisanej polityki
Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,5 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,5 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 1,34 % · rekomendacja wg zapisanej polityki
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,4 · EPSS 0,83 % · rekomendacja wg zapisanej polityki