KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned…
Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu.
Przepełnienie bufora w implementacji SNMP pozwala zdalnemu atakującemu na wykonanie kodu.
Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu.
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before…
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Błąd walidacji adresów w protokole RDS w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień.
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
Błąd typu confusion w Safari umożliwia zdalne wykonanie kodu przez złośliwe treści.
Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Błąd w sandboxie Adobe Flash Player umożliwia zdalne wykonanie kodu przez złośliwe SWF.
Windows Print Spooler Elevation of Privilege Vulnerability
Wykonanie złośliwego kodu w Safari może prowadzić do zdalnego uruchomienia kodu.
An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to…
Windows Print Spooler Elevation of Privilege Vulnerability
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have…
Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via… | Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
Pilne działanie | 8,8 | 11,01 % | ||
| A use after free issue was addressed with improved memory management. | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. |
Pilne działanie | 8,8 | 10,99 % | ||
| A memory corruption issue was addressed with improved input validation. | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges. |
Pilne działanie | 7,8 | 15,94 % | ||
| A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to… | A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication. |
Pilne działanie | 8,8 | 10,9 % | ||
| Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the… | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned… |
Pilne działanie | 8,0 | 14,86 % | ||
| Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu. | Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu. |
Pilne działanie | 8,8 | 10,85 % | ||
| Przepełnienie bufora w implementacji SNMP pozwala zdalnemu atakującemu na wykonanie kodu. | Przepełnienie bufora w implementacji SNMP pozwala zdalnemu atakującemu na wykonanie kodu. |
Pilne działanie | 8,8 | 10,85 % | ||
| Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu. | Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu. |
Pilne działanie | 8,8 | 10,85 % | ||
| WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged… | WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before… |
Pilne działanie | 8,8 | 10,81 % | ||
| Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
Pilne działanie | 7,2 | 18,77 % | ||
| Błąd walidacji adresów w protokole RDS w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień. | Błąd walidacji adresów w protokole RDS w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień. |
Pilne działanie | 7,8 | 15,74 % | ||
| Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an… | Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server |
Pilne działanie | 8,0 | 14,64 % | ||
| Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML… | Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
Pilne działanie | 8,1 | 14,14 % | ||
| Błąd typu confusion w Safari umożliwia zdalne wykonanie kodu przez złośliwe treści. | Błąd typu confusion w Safari umożliwia zdalne wykonanie kodu przez złośliwe treści. |
Pilne działanie | 8,8 | 10,59 % | ||
| Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. | Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
Pilne działanie | 8,8 | 10,59 % | ||
| A memory corruption issue was addressed with improved state management. | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. |
Pilne działanie | 8,8 | 10,55 % | ||
| Błąd w sandboxie Adobe Flash Player umożliwia zdalne wykonanie kodu przez złośliwe SWF. | Błąd w sandboxie Adobe Flash Player umożliwia zdalne wykonanie kodu przez złośliwe SWF. |
Pilne działanie | 8,8 | 10,53 % | ||
| Windows Print Spooler Elevation of Privilege Vulnerability | Windows Print Spooler Elevation of Privilege Vulnerability |
Pilne działanie | 7,2 | 18,46 % | ||
| Wykonanie złośliwego kodu w Safari może prowadzić do zdalnego uruchomienia kodu. | Wykonanie złośliwego kodu w Safari może prowadzić do zdalnego uruchomienia kodu. |
Pilne działanie | 8,8 | 10,16 % | ||
| An issue was discovered in Veritas Backup Exec before 21.2. | An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to… |
Pilne działanie | 8,1 | 13,52 % | ||
| Windows Print Spooler Elevation of Privilege Vulnerability | Windows Print Spooler Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 14,95 % | ||
| An out-of-bounds write issue was addressed with improved bounds checking. | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have… |
Pilne działanie | 8,8 | 9,93 % | ||
| Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a… | Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Pilne działanie | 8,8 | 9,87 % | ||
| A memory corruption issue was addressed with improved memory handling. | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges. |
Pilne działanie | 7,8 | 14,84 % | ||
| A memory corruption issue was addressed with improved memory handling. | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel… |
Pilne działanie | 7,8 | 14,72 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.