KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Eskalacja uprawnień w komponencie polityk przedsiębiorstwa w Firefox umożliwia nieautoryzowany dostęp.
Eskalacja uprawnień w komponencie Workers w DOM umożliwia nieautoryzowany dostęp.
Eskalacja uprawnień w komponencie powiadomień DOM w Firefox umożliwia nieautoryzowany dostęp.
A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker…
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.
Błąd w IE-SR-2TX-WL-4G pozwala na ominięcie autoryzacji SMS po 5 nieudanych próbach.
Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu.
Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu.
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
Typowe pomylenie w PostgreSQL pg_restore_attribute_stats() umożliwia wykonanie dowolnego kodu przez twórcę obiektu.
Błąd w kernelu Linux pozwalał na nieprawidłowe przetwarzanie ACE, co mogło prowadzić do naruszenia integralności DACL.
Błąd use after free w Safe Browsing w Google Chrome umożliwia zdalnemu atakującemu dostęp do pamięci.
Wstrzyknięcie poleceń w Ruijie AP180 umożliwia zdalne wykonanie dowolnych poleceń systemowych.
Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, match_origin/1 returned the bare reflected Origin and allowed credentials even when the wildcard "" was configured, so the response echoed the attacker's origin together with…
Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Eskalacja uprawnień w komponencie polityk przedsiębiorstwa w Firefox umożliwia nieautoryzowany dostęp. | Eskalacja uprawnień w komponencie polityk przedsiębiorstwa w Firefox umożliwia nieautoryzowany dostęp. |
Obserwuj | 8,8 | 0,42 % | ||
| Eskalacja uprawnień w komponencie Workers w DOM umożliwia nieautoryzowany dostęp. | Eskalacja uprawnień w komponencie Workers w DOM umożliwia nieautoryzowany dostęp. |
Obserwuj | 8,8 | 0,42 % | ||
| Eskalacja uprawnień w komponencie powiadomień DOM w Firefox umożliwia nieautoryzowany dostęp. | Eskalacja uprawnień w komponencie powiadomień DOM w Firefox umożliwia nieautoryzowany dostęp. |
Obserwuj | 8,8 | 0,42 % | ||
| A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss… | A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker… |
Obserwuj | 8,8 | 0,41 % | ||
| A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX… | A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device. |
Obserwuj | 8,8 | 0,41 % | ||
| Błąd w IE-SR-2TX-WL-4G pozwala na ominięcie autoryzacji SMS po 5 nieudanych próbach. | Błąd w IE-SR-2TX-WL-4G pozwala na ominięcie autoryzacji SMS po 5 nieudanych próbach. |
Obserwuj | 8,8 | 0,41 % | ||
| Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu. | Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,41 % | ||
| Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu. | Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,41 % | ||
| IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. |
Obserwuj | 8,8 | 0,41 % | ||
| Typowe pomylenie w PostgreSQL pg_restore_attribute_stats() umożliwia wykonanie dowolnego kodu przez twórcę obiektu. | Typowe pomylenie w PostgreSQL pg_restore_attribute_stats() umożliwia wykonanie dowolnego kodu przez twórcę obiektu. |
Obserwuj | 8,8 | 0,41 % | ||
| Błąd w kernelu Linux pozwalał na nieprawidłowe przetwarzanie ACE, co mogło prowadzić do naruszenia integralności DACL. | Błąd w kernelu Linux pozwalał na nieprawidłowe przetwarzanie ACE, co mogło prowadzić do naruszenia integralności DACL. |
Obserwuj | 8,8 | 0,41 % | ||
| Błąd use after free w Safe Browsing w Google Chrome umożliwia zdalnemu atakującemu dostęp do pamięci. | Błąd use after free w Safe Browsing w Google Chrome umożliwia zdalnemu atakującemu dostęp do pamięci. |
Obserwuj | 8,8 | 0,41 % | ||
| Wstrzyknięcie poleceń w Ruijie AP180 umożliwia zdalne wykonanie dowolnych poleceń systemowych. | Wstrzyknięcie poleceń w Ruijie AP180 umożliwia zdalne wykonanie dowolnych poleceń systemowych. |
Obserwuj | 8,6 | 1,41 % | ||
| Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,41 % | ||
| Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside… | Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox… | Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the… | Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. | Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution. |
Obserwuj | 8,8 | 0,41 % | ||
| RabbitMQ is a messaging and streaming broker. | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, match_origin/1 returned the bare reflected Origin and allowed credentials even when the wildcard "" was configured, so the response echoed the attacker's origin together with… |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox… | Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the… | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox… | Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox… | Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,41 % | ||
| Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code… | Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.