KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Podatność w sterownikach jądra Windows umożliwia lokalnym użytkownikom eskalację uprawnień.
Typowe pomylenie w V8 w Google Chrome umożliwia zdalnemu atakującemu potencjalne wykorzystanie uszkodzenia sterty.
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the…
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator…
Obejście uwierzytelnienia w Apple OS X umożliwia lokalnym użytkownikom uzyskanie uprawnień administratora.
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned…
Wykonanie zdalnego kodu w Microsoft Office umożliwia atakującym przejęcie kontroli nad systemem.
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS…
Obejście zabezpieczeń w Microsoft Publisher umożliwia nieautoryzowany dostęp do danych.
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report…
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands. Note: Software…
Windows SmartScreen Security Feature Bypass Vulnerability
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.
Błąd w sterowniku Intel Ethernet umożliwia lokalnym użytkownikom wykonanie kodu z uprawnieniami jądra.
Windows MSHTML Platform Security Feature Bypass Vulnerability
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this…
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Wykonanie dowolnych poleceń w SMA1000 przez zdalnego uwierzytelnionego administratora.
Błąd zapisu poza granicami w jądrze Linux może umożliwić lokalnemu użytkownikowi eskalację uprawnień.
Obejście uwierzytelnienia w FortiOS umożliwia zdalne uzyskanie uprawnień super-admina.
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that…
Przepełnienie bufora w win32k.sys umożliwia lokalnym użytkownikom eskalację uprawnień.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Podatność w sterownikach jądra Windows umożliwia lokalnym użytkownikom eskalację uprawnień. | Podatność w sterownikach jądra Windows umożliwia lokalnym użytkownikom eskalację uprawnień. |
Pilne działanie | 7,8 | 10,03 % | ||
| Typowe pomylenie w V8 w Google Chrome umożliwia zdalnemu atakującemu potencjalne wykorzystanie uszkodzenia sterty. | Typowe pomylenie w V8 w Google Chrome umożliwia zdalnemu atakującemu potencjalne wykorzystanie uszkodzenia sterty. |
Pilne działanie | 8,8 | 5,03 % | ||
| Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 9,99 % | ||
| An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security… | An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the… |
Pilne działanie | 8,8 | 4,95 % | ||
| Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been… | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator… |
Pilne działanie | 7,8 | 9,89 % | ||
| Obejście uwierzytelnienia w Apple OS X umożliwia lokalnym użytkownikom uzyskanie uprawnień administratora. | Obejście uwierzytelnienia w Apple OS X umożliwia lokalnym użytkownikom uzyskanie uprawnień administratora. |
Pilne działanie | 7,8 | 9,89 % | ||
| An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. |
Pilne działanie | 7,8 | 9,87 % | ||
| Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the… | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned… |
Pilne działanie | 7,8 | 9,75 % | ||
| Wykonanie zdalnego kodu w Microsoft Office umożliwia atakującym przejęcie kontroli nad systemem. | Wykonanie zdalnego kodu w Microsoft Office umożliwia atakującym przejęcie kontroli nad systemem. |
Pilne działanie | 8,5 | 6,08 % | ||
| The issue was addressed with improved checks. | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS… |
Pilne działanie | 7,8 | 9,52 % | ||
| Obejście zabezpieczeń w Microsoft Publisher umożliwia nieautoryzowany dostęp do danych. | Obejście zabezpieczeń w Microsoft Publisher umożliwia nieautoryzowany dostęp do danych. |
Pilne działanie | 7,3 | 12,01 % | ||
| A use after free issue was addressed with improved memory management. | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report… |
Pilne działanie | 8,8 | 4,49 % | ||
| An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with… | An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands. Note: Software… |
Pilne działanie | 8,8 | 4,47 % | ||
| Windows SmartScreen Security Feature Bypass Vulnerability | Windows SmartScreen Security Feature Bypass Vulnerability |
Pilne działanie | 8,8 | 4,16 % | ||
| mDNSResponder.exe is vulnerable to DLL Sideloading attack. | mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files. |
Pilne działanie | 7,8 | 9,09 % | ||
| A use-after-free issue was addressed with improved memory management. | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption. |
Pilne działanie | 8,8 | 4,04 % | ||
| Błąd w sterowniku Intel Ethernet umożliwia lokalnym użytkownikom wykonanie kodu z uprawnieniami jądra. | Błąd w sterowniku Intel Ethernet umożliwia lokalnym użytkownikom wykonanie kodu z uprawnieniami jądra. |
Pilne działanie | 7,8 | 9,01 % | ||
| Windows MSHTML Platform Security Feature Bypass Vulnerability | Windows MSHTML Platform Security Feature Bypass Vulnerability |
Pilne działanie | 8,8 | 3,94 % | ||
| Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this… |
Pilne działanie | 8,8 | 3,93 % | ||
| Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap… | Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Pilne działanie | 8,8 | 3,8 % | ||
| Wykonanie dowolnych poleceń w SMA1000 przez zdalnego uwierzytelnionego administratora. | Wykonanie dowolnych poleceń w SMA1000 przez zdalnego uwierzytelnionego administratora. |
Pilne działanie | 7,2 | 11,79 % | ||
| Błąd zapisu poza granicami w jądrze Linux może umożliwić lokalnemu użytkownikowi eskalację uprawnień. | Błąd zapisu poza granicami w jądrze Linux może umożliwić lokalnemu użytkownikowi eskalację uprawnień. |
Pilne działanie | 7,8 | 8,79 % | ||
| Obejście uwierzytelnienia w FortiOS umożliwia zdalne uzyskanie uprawnień super-admina. | Obejście uwierzytelnienia w FortiOS umożliwia zdalne uzyskanie uprawnień super-admina. |
Pilne działanie | 8,1 | 7,23 % | ||
| A memory corruption issue was addressed with improved state management. | A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that… |
Pilne działanie | 8,8 | 3,71 % | ||
| Przepełnienie bufora w win32k.sys umożliwia lokalnym użytkownikom eskalację uprawnień. | Przepełnienie bufora w win32k.sys umożliwia lokalnym użytkownikom eskalację uprawnień. |
Pilne działanie | 7,8 | 8,66 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.