Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated segment is therefore read past the end of the caller's image buffer. Separately, a zero chroma sampling factor makes the block decode loop non-terminating.…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exception messages.
This could allow an attacker with access to logs or other diagnostic output to…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
An out-of-bounds write vulnerability exists in the Grassroots DICOM library (GDCM). The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments (compressed image data stored as multiple fragments). This vulnerability leads to a segmentation fault…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the service object and related registry keys,.
*…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities.
Previous versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset.
To remediate this issue, users should upgrade to version 2.267.0 or…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests.
This could allow a local attacker to extract password…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in
unconfined context
This issue affects policycoreutils through 3.10.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe…
Opis źródłowy NVD · ENalert CERT.pl · CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated segment is therefore read past the end of the caller's image buffer. Separately, a zero chroma sampling factor makes the block decode loop non-terminating.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exception messages.
This could allow an attacker with access to logs or other diagnostic output to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
An out-of-bounds write vulnerability exists in the Grassroots DICOM library (GDCM). The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments (compressed image data stored as multiple fragments). This vulnerability leads to a segmentation fault…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the service object and related registry keys,.
*…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities.
Previous versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset.
To remediate this issue, users should upgrade to version 2.267.0 or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests.
This could allow a local attacker to extract password…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in
unconfined context
This issue affects policycoreutils through 3.10.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe…
Opis źródłowy NVD · EN
Do wiadomości
alert CERT.pl · CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki