KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Luka w Oracle PeopleSoft FIN Expenses pozwala na nieautoryzowany dostęp do danych.
Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to 6.10.5, and prior to 6.11.1 contain an insecure .NET Remoting exposure in the Legacy Remoting Service that is enabled by default. The service registers a TCP remoting channel…
Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02…
Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31;…
Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31;…
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.
An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in…
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially…
Luka w Grav API Plugin umożliwia zdalne wykonanie kodu przez nieautoryzowane webhooki.
Brak uwierzytelnienia w Splunk Enterprise pozwala na pobranie archiwum zadań raportów.
Brak uwierzytelnienia w Splunk Enterprise pozwala na pobranie archiwum raportu przez nieautoryzowanego użytkownika.
Niewłaściwe zabezpieczenie raportów w Splunk Enterprise pozwala nieautoryzowanym użytkownikom na dostęp do danych.
Błąd w porównywaniu MAC w jądrze Linux umożliwia ataki czasowe.
Błąd w jądrze Linux umożliwia modyfikację pamięci przez BPF, co prowadzi do naruszenia integralności danych.
Nieprawidłowe ograniczenie liczby prób uwierzytelnienia w aplikacji BiHayat umożliwia ominięcie uwierzytelnienia.
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,…
Błąd w jądrze Linuxa pozwalał na nieprawidłowe użycie nagłówka MAC, co mogło prowadzić do nieprzewidzianych zachowań.
Wykorzystanie SQL Expressions w Grafanie umożliwia zdalne wykonanie kodu.
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system,…
A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely.
SiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbitrary file assets, allowing stored cross-site scripting attacks. Authenticated attackers can upload HTML files as assets and execute scripts with full kernel API access when the workspace…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Luka w Oracle PeopleSoft FIN Expenses pozwala na nieautoryzowany dostęp do danych. | Luka w Oracle PeopleSoft FIN Expenses pozwala na nieautoryzowany dostęp do danych. |
W tym tygodniu | 9,4 | 0,46 % | ||
| Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to 6.10.5, and prior… | Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to 6.10.5, and prior to 6.11.1 contain an insecure .NET Remoting exposure in the Legacy Remoting Service that is enabled by default. The service registers a TCP remoting channel… |
W tym tygodniu | 9,3 | 0,96 % | ||
| Stack-based Buffer Overflow Vulnerability in HiRDB. | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02… |
W tym tygodniu | 9,4 | 0,45 % | ||
| Stack-based Buffer Overflow Vulnerability in JP1 Products. | Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31;… |
W tym tygodniu | 9,4 | 0,45 % | ||
| Heap-based Buffer Overflow Vulnerability in JP1 Products. | Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31;… |
W tym tygodniu | 9,4 | 0,45 % | ||
| Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. |
W tym tygodniu | 9,4 | 0,45 % | ||
| Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. |
W tym tygodniu | 9,4 | 0,45 % | ||
| Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31. |
W tym tygodniu | 9,4 | 0,45 % | ||
| Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31. |
W tym tygodniu | 9,4 | 0,45 % | ||
| A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary… | A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root. |
W tym tygodniu | 9,4 | 0,45 % | ||
| An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior… | An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in… |
W tym tygodniu | 9,4 | 0,45 % | ||
| Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the… | Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially… |
W tym tygodniu | 9,4 | 0,45 % | ||
| Luka w Grav API Plugin umożliwia zdalne wykonanie kodu przez nieautoryzowane webhooki. | Luka w Grav API Plugin umożliwia zdalne wykonanie kodu przez nieautoryzowane webhooki. |
W tym tygodniu | 9,4 | 0,45 % | ||
| Brak uwierzytelnienia w Splunk Enterprise pozwala na pobranie archiwum zadań raportów. | Brak uwierzytelnienia w Splunk Enterprise pozwala na pobranie archiwum zadań raportów. |
W tym tygodniu | 9,4 | 0,45 % | ||
| Brak uwierzytelnienia w Splunk Enterprise pozwala na pobranie archiwum raportu przez nieautoryzowanego użytkownika. | Brak uwierzytelnienia w Splunk Enterprise pozwala na pobranie archiwum raportu przez nieautoryzowanego użytkownika. |
W tym tygodniu | 9,4 | 0,45 % | ||
| Niewłaściwe zabezpieczenie raportów w Splunk Enterprise pozwala nieautoryzowanym użytkownikom na dostęp do danych. | Niewłaściwe zabezpieczenie raportów w Splunk Enterprise pozwala nieautoryzowanym użytkownikom na dostęp do danych. |
W tym tygodniu | 9,4 | 0,45 % | ||
| Błąd w porównywaniu MAC w jądrze Linux umożliwia ataki czasowe. | Błąd w porównywaniu MAC w jądrze Linux umożliwia ataki czasowe. |
W tym tygodniu | 9,4 | 0,44 % | ||
| Błąd w jądrze Linux umożliwia modyfikację pamięci przez BPF, co prowadzi do naruszenia integralności danych. | Błąd w jądrze Linux umożliwia modyfikację pamięci przez BPF, co prowadzi do naruszenia integralności danych. |
W tym tygodniu | 9,4 | 0,44 % | ||
| Nieprawidłowe ograniczenie liczby prób uwierzytelnienia w aplikacji BiHayat umożliwia ominięcie uwierzytelnienia. | Nieprawidłowe ograniczenie liczby prób uwierzytelnienia w aplikacji BiHayat umożliwia ominięcie uwierzytelnienia. |
W tym tygodniu | 9,4 | 0,44 % | ||
| Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious… | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,… |
W tym tygodniu | 9,3 | 0,94 % | ||
| Błąd w jądrze Linuxa pozwalał na nieprawidłowe użycie nagłówka MAC, co mogło prowadzić do nieprzewidzianych zachowań. | Błąd w jądrze Linuxa pozwalał na nieprawidłowe użycie nagłówka MAC, co mogło prowadzić do nieprzewidzianych zachowań. |
W tym tygodniu | 9,4 | 0,43 % | ||
| Wykorzystanie SQL Expressions w Grafanie umożliwia zdalne wykonanie kodu. | Wykorzystanie SQL Expressions w Grafanie umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 9,1 | 1,93 % | ||
| ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. | ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system,… |
W tym tygodniu | 9,4 | 0,43 % | ||
| A flaw has been found in Netcore NR268 1.7.121109. | A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely. |
W tym tygodniu | 9,4 | 0,43 % | ||
| SiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbitrary file assets, allowing… | SiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbitrary file assets, allowing stored cross-site scripting attacks. Authenticated attackers can upload HTML files as assets and execute scripts with full kernel API access when the workspace… |
W tym tygodniu | 9,4 | 0,43 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.