KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have…
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to…
Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Luka w Internet Explorerze umożliwia atakującemu dostęp do informacji z innych domen.
Dostęp do pamięci poza przydzielonym obszarem w ANGLE w Google Chrome umożliwia zdalne wykonanie kodu.
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges.…
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
Obejście zabezpieczeń Windows SmartScreen umożliwia uruchomienie złośliwego oprogramowania.
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via…
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the…
Przepełnienie bufora w implementacji SNMP pozwala zdalnie wykonać kod lub zrestartować system.
Błędne neutralizowanie w Microsoft Management Console umożliwia lokalne obejście zabezpieczeń.
D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Przepełnienie całkowite w Adobe Flash Player umożliwia zdalne wykonanie kodu.
**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending…
TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
Wykonanie dowolnych poleceń jako root w Cisco Catalyst SD-WAN Manager przez lokalnego atakującego.
Luka w sterowniku jądra Windows umożliwia eskalację uprawnień.
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A memory corruption issue was addressed with improved state management. | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have… |
Pilne działanie | 8,8 | 22,95 % | ||
| A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote… | A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature |
Pilne działanie | 8,8 | 22,92 % | ||
| Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability | Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 27,91 % | ||
| A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to… | A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to… |
Pilne działanie | 7,5 | 29,12 % | ||
| Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a… | Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Pilne działanie | 8,8 | 22,44 % | ||
| Luka w Internet Explorerze umożliwia atakującemu dostęp do informacji z innych domen. | Luka w Internet Explorerze umożliwia atakującemu dostęp do informacji z innych domen. |
Pilne działanie | 8,8 | 22,33 % | ||
| Dostęp do pamięci poza przydzielonym obszarem w ANGLE w Google Chrome umożliwia zdalne wykonanie kodu. | Dostęp do pamięci poza przydzielonym obszarem w ANGLE w Google Chrome umożliwia zdalne wykonanie kodu. |
Pilne działanie | 8,8 | 22,33 % | ||
| An out-of-bounds write issue was addressed with improved input validation. | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges.… |
Pilne działanie | 8,6 | 23,22 % | ||
| A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka… | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. |
Pilne działanie | 8,8 | 21,81 % | ||
| Obejście zabezpieczeń Windows SmartScreen umożliwia uruchomienie złośliwego oprogramowania. | Obejście zabezpieczeń Windows SmartScreen umożliwia uruchomienie złośliwego oprogramowania. |
Pilne działanie | 7,6 | 27,8 % | ||
| A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory,… | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. |
Pilne działanie | 8,8 | 21,71 % | ||
| **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel… | **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via… |
Pilne działanie | 8,8 | 21,7 % | ||
| Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. | Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the… |
Pilne działanie | 7,5 | 28,17 % | ||
| Przepełnienie bufora w implementacji SNMP pozwala zdalnie wykonać kod lub zrestartować system. | Przepełnienie bufora w implementacji SNMP pozwala zdalnie wykonać kod lub zrestartować system. |
Pilne działanie | 8,8 | 21,42 % | ||
| Błędne neutralizowanie w Microsoft Management Console umożliwia lokalne obejście zabezpieczeń. | Błędne neutralizowanie w Microsoft Management Console umożliwia lokalne obejście zabezpieczeń. |
Pilne działanie | 7,0 | 30,39 % | ||
| D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. | D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer |
Pilne działanie | 8,8 | 21,34 % | ||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 26,22 % | ||
| Przepełnienie całkowite w Adobe Flash Player umożliwia zdalne wykonanie kodu. | Przepełnienie całkowite w Adobe Flash Player umożliwia zdalne wykonanie kodu. |
Pilne działanie | 8,8 | 21,19 % | ||
| **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel… | **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending… |
Pilne działanie | 8,8 | 20,7 % | ||
| TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST… | TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. |
Pilne działanie | 8,8 | 20,69 % | ||
| Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute… | Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. |
Pilne działanie | 7,5 | 27,04 % | ||
| An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege… | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server. |
Pilne działanie | 7,4 | 27,36 % | ||
| Wykonanie dowolnych poleceń jako root w Cisco Catalyst SD-WAN Manager przez lokalnego atakującego. | Wykonanie dowolnych poleceń jako root w Cisco Catalyst SD-WAN Manager przez lokalnego atakującego. |
Pilne działanie | 7,8 | 25,32 % | ||
| Luka w sterowniku jądra Windows umożliwia eskalację uprawnień. | Luka w sterowniku jądra Windows umożliwia eskalację uprawnień. |
Pilne działanie | 7,8 | 25,22 % | ||
| Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. | Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. |
Pilne działanie | 7,8 | 25,06 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.