Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Expedition | Palo Alto Networks Expedition OS Command Injection Vulnerability Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. |
7,5 | 98,55 % | Tak | |
| Firefox / Firefox ESR / Thunderbird | Mozilla Firefox Use-After-Free Vulnerability Wykorzystanie use-after-free w Firefox i Thunderbird umożliwia zdalne wykonanie kodu. |
9,8 | 23,18 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+21 produktów) | Microsoft Windows Management Console Remote Code Execution Vulnerability Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution. |
7,8 | 66,7 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+15 produktów) | Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality. |
8,1 | 46,11 % | Tak | |
| Microsoft Configuration Manager | Microsoft Configuration Manager SQL Injection Vulnerability Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server… |
9,8 | 80,53 % | Tak | |
| CSA (Cloud Services Appliance) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Wstrzyknięcie SQL w konsoli administracyjnej Ivanti CSA umożliwia zdalne wykonanie dowolnych poleceń SQL. |
7,2 | 44,27 % | Tak | |
| CSA (Cloud Services Appliance) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS. |
7,2 | 58,32 % | Tak | |
| Snapdragon | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory. |
7,8 | 0,67 % | Tak | |
| Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands. |
9,8 | 99,91 % | Tak | |
| CSA (Cloud Services Appliance) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in conjunction with CVE-2024-8190, an attacker could bypass admin authentication and execute arbitrary… |
9,1 | 98,61 % | Tak | |
| PT30X-SDI / PT30X-NDI | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script. |
7,2 | 79,84 % | Tak | |
| PT30X-SDI / PT30X-NDI | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead to remote code execution as root. |
9,1 | 58,79 % | Tak | |
| VMware vCenter Server / VMware Cloud Foundation | VMware vCenter Server Privilege Escalation Vulnerability VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet. |
9,8 | 17,36 % | Tak | |
| VMware vCenter Server / VMware Cloud Foundation | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet. |
9,8 | 54,57 % | Tak | |
| CSA (Cloud Services Appliance) | Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS. |
7,2 | 88,54 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+21 produktów) | Microsoft Windows MSHTML Platform Spoofing Vulnerability Podatność w Windows MSHTML umożliwia oszustwo w wyświetlaniu treści. |
8,8 | 54,21 % | Tak | |
| Microsoft Office 2019 / Microsoft Office LTSC 2021 / Microsoft Publisher 2016 | Microsoft Publisher Protection Mechanism Failure Vulnerability Obejście zabezpieczeń w Microsoft Publisher umożliwia nieautoryzowany dostęp do danych. |
7,3 | 2,67 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+21 produktów) | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability Obejście zabezpieczeń Mark of the Web w Windows umożliwia uruchomienie złośliwego kodu. |
5,4 | 10,03 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+21 produktów) | Microsoft Windows Installer Improper Privilege Management Vulnerability Podatność w Windows Installer umożliwia eskalację uprawnień. |
7,8 | 6,26 % | Tak | |
| Backup and Recovery | Veeam Backup and Replication Deserialization Vulnerability Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. |
9,8 | 90,37 % | Tak | |
| Cisco Smart License Utility | Cisco Smart Licensing Utility Static Credential Vulnerability Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacker to log in to an affected system and gain administrative credentials. |
9,8 | 97,09 % | Tak | |
| Apache OFBiz | Apache OFBiz Forced Browsing Vulnerability Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access. |
7,5 | 99,98 % | Tak | |
| WhatsUp Gold | Progress WhatsUp Gold SQL Injection Vulnerability Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user. |
9,8 | 92,91 % | Tak | |
| SonicOS | SonicWall SonicOS Improper Access Control Vulnerability SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash. |
9,8 | 18,38 % | Tak | |
| Director | Versa Director Dangerous File Type Upload Vulnerability The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges to customize the user interface. The “Change Favicon” (Favorite Icon) enables the upload of a… |
7,2 | 3,99 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.