KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix stale receive device on merged fragments Fragment reassembly reuses the skb from the highest-numbered buffered fragment as the merged packet. When that fragment was received on a hard interface which is deleted…
Przepełnienie bufora w jądrze Linuxa w ThunderboltIP może prowadzić do uszkodzenia pamięci.
Niewystarczająca walidacja danych w Google Chrome umożliwia zdalne eskalowanie uprawnień.
Wykorzystanie po zwolnieniu pamięci w HTML w Google Chrome umożliwia zdalnemu atakującemu potencjalne usunięcie danych.
Błąd use after free w Chrome na iOS umożliwia zdalnemu atakującemu wykorzystanie korupcji pamięci.
Błąd use after free w Google Chrome na Linuxie umożliwia zdalnemu atakującemu wykorzystanie korupcji sterty.
Problem z cyklem życia obiektów w WebRTC w Google Chrome umożliwia zdalnemu atakującemu potencjalne wykorzystanie uszkodzenia sterty.
Błąd use after free w Google Chrome umożliwia zdalnemu atakującemu potencjalne usunięcie pamięci.
Wykorzystanie po zwolnieniu pamięci w Audio w Google Chrome na Mac umożliwia eskalację uprawnień.
Wykorzystanie po zwolnieniu pamięci w Views w Google Chrome umożliwia zdalne wykorzystanie korupcji sterty.
Zapis poza granicami w Codecs w Google Chrome umożliwia zdalnemu atakującemu potencjalne obejście piaskownicy.
Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.9.5, an authenticated SQL Injection vulnerability in the API allows any user, regardless of permission level, to execute arbitrary SQL queries. By manipulating the display parameter in…
Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ…
In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed probe hid_device_io_start() allows reports to run concurrently with probe. If the probe subsequently fails, __hid_device_probe() releases driver resources and clears…
Błąd w jądrze Linuxa w RFCOMM umożliwia odczytanie zwolnionych obiektów, co prowadzi do nieprzewidywalnych zachowań.
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned…
In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an…
A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has…
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed inserts a fixed type's namespace value between quotes inside a generated…
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed interpolates a fixed type's aliases value directly into a generated types.confixed…
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0.70.5, ClassRepresentation.render_docstring copies a schema record's doc value into a generated triple-double-quoted…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering… | Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,35 % | ||
| In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix stale receive device on merged fragments Fragment… | In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix stale receive device on merged fragments Fragment reassembly reuses the skb from the highest-numbered buffered fragment as the merged packet. When that fragment was received on a hard interface which is deleted… |
Obserwuj | 8,8 | 0,35 % | ||
| Przepełnienie bufora w jądrze Linuxa w ThunderboltIP może prowadzić do uszkodzenia pamięci. | Przepełnienie bufora w jądrze Linuxa w ThunderboltIP może prowadzić do uszkodzenia pamięci. |
Obserwuj | 8,8 | 0,35 % | ||
| Niewystarczająca walidacja danych w Google Chrome umożliwia zdalne eskalowanie uprawnień. | Niewystarczająca walidacja danych w Google Chrome umożliwia zdalne eskalowanie uprawnień. |
Obserwuj | 8,8 | 0,35 % | ||
| Wykorzystanie po zwolnieniu pamięci w HTML w Google Chrome umożliwia zdalnemu atakującemu potencjalne usunięcie danych. | Wykorzystanie po zwolnieniu pamięci w HTML w Google Chrome umożliwia zdalnemu atakującemu potencjalne usunięcie danych. |
Obserwuj | 8,8 | 0,35 % | ||
| Błąd use after free w Chrome na iOS umożliwia zdalnemu atakującemu wykorzystanie korupcji pamięci. | Błąd use after free w Chrome na iOS umożliwia zdalnemu atakującemu wykorzystanie korupcji pamięci. |
Obserwuj | 8,8 | 0,35 % | ||
| Błąd use after free w Google Chrome na Linuxie umożliwia zdalnemu atakującemu wykorzystanie korupcji sterty. | Błąd use after free w Google Chrome na Linuxie umożliwia zdalnemu atakującemu wykorzystanie korupcji sterty. |
Obserwuj | 8,8 | 0,35 % | ||
| Problem z cyklem życia obiektów w WebRTC w Google Chrome umożliwia zdalnemu atakującemu potencjalne wykorzystanie uszkodzenia sterty. | Problem z cyklem życia obiektów w WebRTC w Google Chrome umożliwia zdalnemu atakującemu potencjalne wykorzystanie uszkodzenia sterty. |
Obserwuj | 8,8 | 0,35 % | ||
| Błąd use after free w Google Chrome umożliwia zdalnemu atakującemu potencjalne usunięcie pamięci. | Błąd use after free w Google Chrome umożliwia zdalnemu atakującemu potencjalne usunięcie pamięci. |
Obserwuj | 8,8 | 0,35 % | ||
| Wykorzystanie po zwolnieniu pamięci w Audio w Google Chrome na Mac umożliwia eskalację uprawnień. | Wykorzystanie po zwolnieniu pamięci w Audio w Google Chrome na Mac umożliwia eskalację uprawnień. |
Obserwuj | 8,8 | 0,35 % | ||
| Wykorzystanie po zwolnieniu pamięci w Views w Google Chrome umożliwia zdalne wykorzystanie korupcji sterty. | Wykorzystanie po zwolnieniu pamięci w Views w Google Chrome umożliwia zdalne wykorzystanie korupcji sterty. |
Obserwuj | 8,8 | 0,35 % | ||
| Zapis poza granicami w Codecs w Google Chrome umożliwia zdalnemu atakującemu potencjalne obejście piaskownicy. | Zapis poza granicami w Codecs w Google Chrome umożliwia zdalnemu atakującemu potencjalne obejście piaskownicy. |
Obserwuj | 8,8 | 0,35 % | ||
| Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI… | Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,35 % | ||
| Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in… | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,35 % | ||
| OpenSTAManager is an open source management software for technical assistance and invoicing. | OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.9.5, an authenticated SQL Injection vulnerability in the API allows any user, regardless of permission level, to execute arbitrary SQL queries. By manipulating the display parameter in… |
Obserwuj | 8,8 | 0,35 % | ||
| Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code… | Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
Obserwuj | 8,8 | 0,34 % | ||
| Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ… |
W tym tygodniu | 8,8 | 0,34 % | ||
| In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed… | In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed probe hid_device_io_start() allows reports to run concurrently with probe. If the probe subsequently fails, __hid_device_probe() releases driver resources and clears… |
Obserwuj | 8,8 | 0,34 % | ||
| Błąd w jądrze Linuxa w RFCOMM umożliwia odczytanie zwolnionych obiektów, co prowadzi do nieprzewidywalnych zachowań. | Błąd w jądrze Linuxa w RFCOMM umożliwia odczytanie zwolnionych obiektów, co prowadzi do nieprzewidywalnych zachowań. |
Obserwuj | 8,8 | 0,34 % | ||
| In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The… | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned… |
Obserwuj | 8,8 | 0,34 % | ||
| In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on… | In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an… |
Obserwuj | 8,8 | 0,34 % | ||
| A weakness has been identified in Bdtask Flight Booking Software 4. | A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has… |
W tym tygodniu | 8,8 | 0,34 % | ||
| dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from… | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed inserts a fixed type's namespace value between quotes inside a generated… |
Obserwuj | 8,8 | 0,34 % | ||
| dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from… | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed interpolates a fixed type's aliases value directly into a generated types.confixed… |
Obserwuj | 8,8 | 0,34 % | ||
| dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from… | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0.70.5, ClassRepresentation.render_docstring copies a schema record's doc value into a generated triple-double-quoted… |
Obserwuj | 8,8 | 0,34 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.