KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation.…
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where JD Edwards…
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector…
Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administrator initiates an account deletion, the system invokes an internal maintenance routine to clean up cryptographic keys…
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL.…
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143.
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024.
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217.
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195.
LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions…
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The…
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call causing…
Obejście uwierzytelnienia w IBM WebSphere Application Server pozwala na eskalację uprawnień.
Błąd zapisu poza granicami w Keymaster trustlet umożliwia lokalnym atakującym eskalację uprawnień.
Wykorzystanie po zwolnieniu pamięci w geniezone umożliwia lokalną eskalację uprawnień.
W Audio HAL występuje eskalacja uprawnień z powodu użycia po zwolnieniu, co umożliwia lokalną eskalację uprawnień.
W Audio HAL występuje możliwość eskalacji uprawnień z powodu użycia po zwolnieniu pamięci.
Typowe pomylenie typów w Power HAL umożliwia lokalną eskalację uprawnień.
Korupcja pamięci w SurfaceFlinger może prowadzić do lokalnej eskalacji uprawnień.
Lokalna eskalacja uprawnień w Prisma® Browser umożliwia administratorowi działanie z uprawnieniami roota.
Przepełnienie bufora w Telephony umożliwia lokalną eskalację uprawnień.
Obejście uprawnień w Modem umożliwia lokalną eskalację uprawnień dla złośliwego aktora.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| In ccci, there is a possible out of bounds write and read due to a missing bounds check. | In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation.… |
Do wiadomości | 6,7 | 0,12 % | ||
| Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where JD Edwards… |
Do wiadomości | 6,7 | 0,12 % | ||
| Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector… |
Do wiadomości | 6,7 | 0,12 % | ||
| Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the… | Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method. |
Do wiadomości | 6,5 | 1,12 % | ||
| Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Execution with… | Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. |
Do wiadomości | 6,7 | 0,12 % | ||
| An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0… | An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administrator initiates an account deletion, the system invokes an internal maintenance routine to clean up cryptographic keys… |
Do wiadomości | 6,6 | 0,62 % | ||
| URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be… | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL.… |
Do wiadomości | 6,7 | 0,12 % | ||
| In apusys, there is a possible memory corruption due to use after free. | In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143. |
Do wiadomości | 6,7 | 0,11 % | ||
| In aidl, there is a possible memory corruption due to use after free. | In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038. |
Do wiadomości | 6,7 | 0,11 % | ||
| In aidl, there is a possible memory corruption due to use after free. | In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024. |
Do wiadomości | 6,7 | 0,11 % | ||
| In battery, there is a possible out of bounds write due to a missing bounds check. | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217. |
Do wiadomości | 6,7 | 0,11 % | ||
| In display, there is a possible out of bounds write due to a missing bounds check. | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195. |
Do wiadomości | 6,7 | 0,11 % | ||
| LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. | LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions… |
Do wiadomości | 6,7 | 0,11 % | ||
| Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The… |
Do wiadomości | 6,7 | 0,11 % | ||
| IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a… | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call causing… |
Do wiadomości | 6,7 | 0,11 % | ||
| Obejście uwierzytelnienia w IBM WebSphere Application Server pozwala na eskalację uprawnień. | Obejście uwierzytelnienia w IBM WebSphere Application Server pozwala na eskalację uprawnień. |
Do wiadomości | 6,7 | 0,11 % | ||
| Błąd zapisu poza granicami w Keymaster trustlet umożliwia lokalnym atakującym eskalację uprawnień. | Błąd zapisu poza granicami w Keymaster trustlet umożliwia lokalnym atakującym eskalację uprawnień. |
Do wiadomości | 6,7 | 0,11 % | ||
| Wykorzystanie po zwolnieniu pamięci w geniezone umożliwia lokalną eskalację uprawnień. | Wykorzystanie po zwolnieniu pamięci w geniezone umożliwia lokalną eskalację uprawnień. |
Do wiadomości | 6,7 | 0,11 % | ||
| W Audio HAL występuje eskalacja uprawnień z powodu użycia po zwolnieniu, co umożliwia lokalną eskalację uprawnień. | W Audio HAL występuje eskalacja uprawnień z powodu użycia po zwolnieniu, co umożliwia lokalną eskalację uprawnień. |
Do wiadomości | 6,7 | 0,11 % | ||
| W Audio HAL występuje możliwość eskalacji uprawnień z powodu użycia po zwolnieniu pamięci. | W Audio HAL występuje możliwość eskalacji uprawnień z powodu użycia po zwolnieniu pamięci. |
Do wiadomości | 6,7 | 0,11 % | ||
| Typowe pomylenie typów w Power HAL umożliwia lokalną eskalację uprawnień. | Typowe pomylenie typów w Power HAL umożliwia lokalną eskalację uprawnień. |
Do wiadomości | 6,7 | 0,11 % | ||
| Korupcja pamięci w SurfaceFlinger może prowadzić do lokalnej eskalacji uprawnień. | Korupcja pamięci w SurfaceFlinger może prowadzić do lokalnej eskalacji uprawnień. |
Do wiadomości | 6,7 | 0,11 % | ||
| Lokalna eskalacja uprawnień w Prisma® Browser umożliwia administratorowi działanie z uprawnieniami roota. | Lokalna eskalacja uprawnień w Prisma® Browser umożliwia administratorowi działanie z uprawnieniami roota. |
Do wiadomości | 6,7 | 0,11 % | ||
| Przepełnienie bufora w Telephony umożliwia lokalną eskalację uprawnień. | Przepełnienie bufora w Telephony umożliwia lokalną eskalację uprawnień. |
Do wiadomości | 6,7 | 0,11 % | ||
| Obejście uprawnień w Modem umożliwia lokalną eskalację uprawnień dla złośliwego aktora. | Obejście uprawnień w Modem umożliwia lokalną eskalację uprawnień dla złośliwego aktora. |
Do wiadomości | 6,7 | 0,11 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.