KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient filtering before the restorekey field is concatenated into a shell command. A remote attacker can trigger this vulnerability via crafted input…
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerability is caused by incomplete filtering of dangerous characters such as backticks, newline characters, and single quotes in the parameter field. A remote attacker can trigger…
Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the event_code field is concatenated into a system command. A remote attacker can trigger this…
Atak czasowy w Misskey umożliwia akceptację nieprawdziwych informacji, co prowadzi do utraty integralności.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
Przejęcie konta w JetBrains YouTrack możliwe przez odtworzenie podpisu powiadomienia.
Nieprawidłowe neutralizowanie elementów w IBM Guardium Data Protection umożliwia zdalne wykonanie poleceń.
Wykorzystanie formatu ciągu w D-Link DCS-935L umożliwia zdalne wykonanie kodu.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. | Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient filtering before the restorekey field is concatenated into a shell command. A remote attacker can trigger this vulnerability via crafted input… |
Obserwuj | 8,6 | 1,78 % | ||
| Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerability is caused by incomplete filtering of dangerous characters such as backticks, newline characters, and single quotes in the parameter field. A remote attacker can trigger… |
Obserwuj | 8,6 | 1,78 % | ||
| Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. | Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the event_code field is concatenated into a system command. A remote attacker can trigger this… |
Obserwuj | 8,6 | 1,78 % | ||
| Atak czasowy w Misskey umożliwia akceptację nieprawdziwych informacji, co prowadzi do utraty integralności. | Atak czasowy w Misskey umożliwia akceptację nieprawdziwych informacji, co prowadzi do utraty integralności. |
Obserwuj | 8,9 | 0,28 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. | Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Przejęcie konta w JetBrains YouTrack możliwe przez odtworzenie podpisu powiadomienia. | Przejęcie konta w JetBrains YouTrack możliwe przez odtworzenie podpisu powiadomienia. |
Obserwuj | 8,9 | 0,28 % | ||
| Nieprawidłowe neutralizowanie elementów w IBM Guardium Data Protection umożliwia zdalne wykonanie poleceń. | Nieprawidłowe neutralizowanie elementów w IBM Guardium Data Protection umożliwia zdalne wykonanie poleceń. |
Obserwuj | 8,8 | 0,78 % | ||
| Wykorzystanie formatu ciągu w D-Link DCS-935L umożliwia zdalne wykonanie kodu. | Wykorzystanie formatu ciągu w D-Link DCS-935L umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,78 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.