Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Wing FTP Server | Wing FTP Server Information Disclosure Vulnerability Ujawnienie pełnej ścieżki instalacji w Wing FTP Server umożliwia atakującym zdobycie informacji o strukturze systemu. |
4,3 | 63,25 % | Tak | |
| git | Git Link Following Vulnerability Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files. |
8,0 | 4,48 % | Tak | |
| Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition | Microsoft SharePoint Improper Authentication Vulnerability Nieprawidłowa autoryzacja w Microsoft Office SharePoint umożliwia atakującemu podszywanie się w sieci. |
6,5 | 99,86 % | Tak | |
| Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 | Microsoft SharePoint Code Injection Vulnerability Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust… |
8,8 | > 99,99 % | Tak | |
| Chrome | Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. |
8,1 | 14,14 % | Tak | |
| Sudo | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file. |
7,8 | 56,3 % | Tak | |
| Cisco Identity Services Engine Software | Cisco Identity Services Engine Injection Vulnerability Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an… |
10,0 | 97,6 % | Tak | |
| ADC / Gateway | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server. |
9,8 | 10,43 % | Tak | |
| KACE Systems Management Appliance (SMA) | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Obejście uwierzytelnienia w Quest KACE SMA pozwala na przejęcie konta administratora. |
10,0 | 2,49 % | Tak | |
| Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Luka XSS w Zimbra Classic UI umożliwia wykonanie dowolnego JavaScriptu w sesji użytkownika. |
6,1 | 1,71 % | Tak | |
| WinRAR | RARLAB WinRAR Path Traversal Vulnerability RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user. |
7,8 | 90,48 % | Tak | |
| ADC / Gateway | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Niewystarczająca walidacja danych w NetScaler prowadzi do odczytu pamięci. |
7,5 | 99,92 % | Tak | |
| iOS and iPadOS / iPadOS / macOS (+2 produktów) | Apple Multiple Products Unspecified Vulnerability Problem z przetwarzaniem złośliwie przygotowanego zdjęcia w iCloud może prowadzić do ataku. |
4,2 | 1 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+22 produktów) | Microsoft Windows SMB Client Improper Access Control Vulnerability Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate. |
8,8 | 82,83 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+22 produktów) | Microsoft Windows External Control of File Name or Path Vulnerability Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files. |
8,8 | 87,13 % | Tak | |
| IGEL OS | IGEL OS Use of a Key Past its Expiration Date Vulnerability IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. |
4,6 | 5,15 % | Tak | |
| Snapdragon | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. |
8,6 | 0,78 % | Tak | |
| Snapdragon | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome. |
7,5 | 1,04 % | Tak | |
| Snapdragon | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. |
8,6 | 0,43 % | Tak | |
| Chrome | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome,… |
8,8 | 7,55 % | Tak | |
| DELMIA Apriso | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution. |
9,0 | 97,16 % | Tak | |
| Webmail | RoundCube Webmail Deserialization of Untrusted Data Vulnerability RoundCube Webmail contains a deserialization of untrusted data vulnerability that allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php. |
8,8 | 99,6 % | Tak | |
| service | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump. |
4,0 | 0,58 % | Tak | |
| service | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the Spring Boot Actuator is configured with an exposed heap dump endpoint at a /heapdump URI. |
5,3 | 12,15 % | Tak | |
| Concerto | Versa Concerto Improper Authentication Vulnerability Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs. |
7,5 | 81,78 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.