Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| macOS / iOS and iPadOS / Safari | Apple Multiple products Use-After-Free Vulnerability Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption. |
8,8 | 4,04 % | Tak | |
| @react-native-community/cli-server-api | React Native Community CLI OS Command Injection Vulnerability React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute… |
9,8 | 93,98 % | Tak | |
| Identity Manager | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability Luka w Oracle Identity Manager pozwala nieautoryzowanemu atakującemu na przejęcie systemu. |
9,8 | 88,65 % | Tak | |
| Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets. |
9,3 | 2,77 % | Tak | |
| BIG-IP | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability Luka w BIG-IP APM umożliwia zdalne wykonanie kodu przez złośliwy ruch. |
9,3 | 2,3 % | Tak | |
| Windows Server 2012 / Windows Server 2012 (Server Core installation) / Windows Server 2012 R2 (+9 produktów) | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution. |
9,8 | 99,98 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+23 produktów) | Microsoft Windows Improper Access Control Vulnerability Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally. |
7,8 | 2,72 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+22 produktów) | Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges. |
7,8 | 7,95 % | Tak | |
| Linux | Linux Kernel Race Condition Vulnerability Błąd w jądrze Linuxa pozwalał na nieprzewidywalne przeplatanie danych przy równoczesnych zapisach w gnieździe af_alg. |
5,5 | 1,61 % | Tak | |
| Oracle Configurator | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Luka w Oracle Configurator umożliwia nieautoryzowany dostęp do krytycznych danych. |
7,5 | 95,89 % | Tak | |
| CentreStack and TrioFox | Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Lokalne włączenie pliku w Gladinet CentreStack i TrioFox umożliwia ujawnienie systemowych plików. |
7,5 | 92,37 % | Tak | |
| Oracle Concurrent Processing | Oracle E-Business Suite Unspecified Vulnerability Luka w Oracle E-Business Suite pozwala zdalnie przejąć kontrolę nad procesowaniem równoległym. |
9,8 | 99,76 % | Tak | |
| VCF operations / VMware tools / VMware Aria Operations (+3 produktów) | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this… |
7,8 | 16,38 % | Tak | |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Nieprawidłowa walidacja danych w serwerze VPN Cisco ASA umożliwia zdalne wykonanie kodu. |
9,9 | 72,04 % | Tak | |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Błąd w serwerze VPN Cisco Secure Firewall umożliwia dostęp do zastrzeżonych URL bez uwierzytelnienia. |
8,6 | 86,69 % | Tak | |
| IOS / Cisco IOS XE Software / Cisco IOS XE Catalyst SD-WAN | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload,… |
7,7 | 40,58 % | Tak | |
| Chrome | Google Chromium V8 Type Confusion Vulnerability Typowe pomylenie w V8 w Google Chrome umożliwia zdalnemu atakującemu potencjalne wykorzystanie uszkodzenia sterty. |
9,8 | 8,97 % | Tak | |
| Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine. |
9,8 | 90,56 % | Tak | |
| Email Security Gateway | Libraesva Email Security Gateway Command Injection Vulnerability Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment. |
6,1 | 1,96 % | Tak | |
| CentOS Web Panel | CWP Control Web Panel OS Command Injection Vulnerability CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known. |
9,0 | 99,66 % | Tak | |
| GoAnywhere MFT | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Wrażliwość na deserializację w Fortra GoAnywhere MFT umożliwia wstrzyknięcie poleceń. |
9,8 | 99,82 % | Tak | |
| Fireware OS | WatchGuard Firebox Out-of-Bounds Write Vulnerability Przepełnienie bufora w WatchGuard Fireware OS umożliwia zdalne wykonanie kodu. |
9,8 | 92,22 % | Tak | |
| Samsung Mobile Devices | Samsung Mobile Devices Out-of-Bounds Write Vulnerability Błąd zapisu poza granicami w libimagecodec.quram.so umożliwia zdalne wykonanie kodu. |
9,8 | 35,68 % | Tak | |
| Samsung Mobile Devices | Samsung Mobile Devices Out-of-Bounds Write Vulnerability Błąd zapisu poza granicami w libimagecodec.quram.so umożliwia zdalne wykonanie kodu. |
9,8 | 2,22 % | Tak | |
| Adobe Commerce | Adobe Commerce and Magento Improper Input Validation Vulnerability Nieprawidłowa walidacja danych w Adobe Commerce umożliwia przejęcie sesji, co zagraża poufności i integralności danych. |
9,1 | 95,53 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.