KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Reflected cross-site scripting vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recommended to upgrade to version 24.09.03, which fixes the issue.
Brak sprawdzenia uprawnień w wtyczce Widgets for Social Photo Feed pozwala na nieautoryzowany dostęp do danych.
Wykorzystanie przejścia katalogu w Cockpit umożliwia atakującym zapis plików w dowolnych lokalizacjach.
Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition…
Błąd w Capsule pozwala właścicielowi tenantów na tworzenie zasobów klastrowych bez odpowiednich uprawnień.
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the…
Błąd autoryzacji w ColdFusion może prowadzić do odmowy usługi aplikacji.
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Luka przepełnienia ścieżki w Apache Zeppelin pozwala na nieautoryzowane operacje na plikach.
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI…
Wstrzyknięcie poleceń w Totolink CA750-PoE umożliwia zdalne wykonanie kodu.
Wstrzyknięcie poleceń w Totolink CA750-PoE umożliwia zdalne wykonanie kodu.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,84 % | ||
| Reflected cross-site scripting vulnerability in Apache OFBiz. | Reflected cross-site scripting vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recommended to upgrade to version 24.09.03, which fixes the issue. |
Do wiadomości | 6,5 | 0,83 % | ||
| Brak sprawdzenia uprawnień w wtyczce Widgets for Social Photo Feed pozwala na nieautoryzowany dostęp do danych. | Brak sprawdzenia uprawnień w wtyczce Widgets for Social Photo Feed pozwala na nieautoryzowany dostęp do danych. |
Do wiadomości | 6,5 | 0,83 % | ||
| Wykorzystanie przejścia katalogu w Cockpit umożliwia atakującym zapis plików w dowolnych lokalizacjach. | Wykorzystanie przejścia katalogu w Cockpit umożliwia atakującym zapis plików w dowolnych lokalizacjach. |
Do wiadomości | 6,5 | 0,83 % | ||
| Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a… | Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition… |
Do wiadomości | 6,6 | 0,33 % | ||
| Błąd w Capsule pozwala właścicielowi tenantów na tworzenie zasobów klastrowych bez odpowiednich uprawnień. | Błąd w Capsule pozwala właścicielowi tenantów na tworzenie zasobów klastrowych bez odpowiednich uprawnień. |
Do wiadomości | 6,6 | 0,33 % | ||
| Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. | Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. |
Do wiadomości | 6,5 | 0,82 % | ||
| Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network. | Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,82 % | ||
| A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to… | A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the… |
Do wiadomości | 6,6 | 0,31 % | ||
| Błąd autoryzacji w ColdFusion może prowadzić do odmowy usługi aplikacji. | Błąd autoryzacji w ColdFusion może prowadzić do odmowy usługi aplikacji. |
Do wiadomości | 6,5 | 0,81 % | ||
| Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,81 % | ||
| Luka przepełnienia ścieżki w Apache Zeppelin pozwala na nieautoryzowane operacje na plikach. | Luka przepełnienia ścieżki w Apache Zeppelin pozwala na nieautoryzowane operacje na plikach. |
Do wiadomości | 6,5 | 0,8 % | ||
| Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI… |
Do wiadomości | 6,6 | 0,3 % | ||
| Wstrzyknięcie poleceń w Totolink CA750-PoE umożliwia zdalne wykonanie kodu. | Wstrzyknięcie poleceń w Totolink CA750-PoE umożliwia zdalne wykonanie kodu. |
Do wiadomości | 6,3 | 1,8 % | ||
| Wstrzyknięcie poleceń w Totolink CA750-PoE umożliwia zdalne wykonanie kodu. | Wstrzyknięcie poleceń w Totolink CA750-PoE umożliwia zdalne wykonanie kodu. |
Do wiadomości | 6,3 | 1,8 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.