Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Web Help Desk | SolarWinds Web Help Desk Hardcoded Credential Vulnerability SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data. |
9,1 | 93,3 % | Tak | |
| Chrome | Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. |
9,6 | 21,01 % | Tak | |
| Chrome | Google Chromium V8 Inappropriate Implementation Vulnerability Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome,… |
8,8 | 18,53 % | Tak | |
| WPS Office | Kingsoft WPS Office Path Traversal Vulnerability Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library. |
7,8 | 3,06 % | Tak | |
| Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution. |
9,8 | 84,63 % | Tak | |
| vTM | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Błędna implementacja algorytmu uwierzytelniania w Ivanti vTM pozwala na ominięcie uwierzytelnienia panelu admina. |
9,8 | > 99,99 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+16 produktów) | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file. |
6,5 | 13,63 % | Tak | |
| Windows 11 Version 24H2 / Windows 10 Version 1809 / Windows Server 2019 (+21 produktów) | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. |
7,8 | 28,5 % | Tak | |
| Microsoft Office 2019 / Microsoft 365 Apps for Enterprise / Microsoft Project 2016 (+1 produktów) | Microsoft Project Remote Code Execution Vulnerability Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file. |
8,8 | 8,19 % | Tak | |
| Windows 11 Version 24H2 / Windows 10 Version 1809 / Windows Server 2019 (+15 produktów) | Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL. |
7,5 | 41,38 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+13 produktów) | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition. |
7,0 | 6,34 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+17 produktów) | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges. |
7,8 | 1,64 % | Tak | |
| SIP Phones | Mitel SIP Phones Argument Injection Vulnerability Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the… |
7,2 | 41,65 % | Tak | |
| Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user interface. An attacker can exploit this vulnerability via an email message containing a crafted calendar header, leading to the execution of arbitrary… |
6,1 | 24,61 % | Tak | |
| ThreatSonar Anti-Ransomware | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files,… |
7,2 | 1,79 % | Tak | |
| MagicINFO 9 Server | Samsung MagicINFO 9 Server Path Traversal Vulnerability Nieprawidłowe ograniczenie ścieżki w Samsung MagicINFO 9 Server umożliwia atakującym zapis dowolnych plików z uprawnieniami systemowymi. |
9,8 | 91,94 % | Tak | |
| Webmail | RoundCube Webmail Cross-Site Scripting Vulnerability RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php. |
9,3 | 82,88 % | Tak | |
| Apache OFBiz | Apache OFBiz Incorrect Authorization Vulnerability Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker. |
9,8 | 99,41 % | Tak | |
| Acronis Cyber Infrastructure | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords. |
9,8 | 53,54 % | Tak | |
| WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability Luka w Oracle WebLogic Server pozwala nieautoryzowanemu atakującemu na dostęp do danych. |
7,5 | 74,16 % | Tak | |
| Expedition | Palo Alto Networks Expedition Missing Authentication Vulnerability Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data. |
9,8 | 91,68 % | Tak | |
| Now Platform | ServiceNow Improper Input Validation Vulnerability ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely. |
9,8 | 99,98 % | Tak | |
| Now Platform | ServiceNow Incomplete List of Disallowed Inputs Vulnerability ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely. |
9,8 | 99,63 % | Tak | |
| Windows 10 Version 22H2 / Windows 11 Version 23H2 / Windows 10 Version 1507 (+16 produktów) | Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability. |
7,5 | 84,35 % | Tak | |
| Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition | Microsoft SharePoint Deserialization Vulnerability Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. |
7,2 | 50,89 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.