Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| ScreenConnect | ConnectWise ScreenConnect Path Traversal Vulnerability Luka w ConnectWise ScreenConnect umożliwia zdalne wykonanie kodu przez atakującego. |
8,4 | 95,44 % | Tak | |
| ScreenConnect | ConnectWise ScreenConnect Authentication Bypass Vulnerability ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices. |
10,0 | 99,98 % | Tak | |
| Agile PLM Framework | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system. |
8,8 | 3,93 % | Tak | |
| FortiSwitchManager / FortiOS / FortiPAM (+1 produktów) | Fortinet Multiple Products Format String Vulnerability Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. |
9,8 | 61,72 % | Tak | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 2016 / Microsoft Office 2019 (+1 produktów) | Microsoft Outlook Improper Input Validation Vulnerability Wykorzystanie luki w Microsoft Outlook umożliwia zdalne wykonanie kodu. |
9,8 | 94,66 % | Tak | |
| Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 13 / Microsoft Exchange Server 2019… | Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. |
9,8 | 12,66 % | Tak | |
| Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 (+8 produktów) | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability Obejście zabezpieczeń plików skrótów internetowych umożliwia nieautoryzowany dostęp do systemu. |
8,1 | 99,41 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+9 produktów) | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Obejście zabezpieczeń Windows SmartScreen umożliwia uruchomienie złośliwego oprogramowania. |
7,6 | 27,8 % | Tak | |
| Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 (+8 produktów) | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Podatność w jądrze Windows umożliwia eskalację uprawnień. |
7,8 | 62,21 % | Tak | |
| FortiOS / FortiProxy | Fortinet FortiOS Out-of-Bound Write Vulnerability Przepełnienie bufora w FortiOS umożliwia zdalne wykonanie nieautoryzowanego kodu. |
9,8 | 84,59 % | Tak | |
| ICS / IPS | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Wykorzystanie podatności SSRF w Ivanti Connect Secure umożliwia dostęp do zastrzeżonych zasobów bez uwierzytelnienia. |
8,2 | > 99,99 % | Tak | |
| Kernel | Linux Kernel Use-After-Free Vulnerability Luka use-after-free w komponencie nf_tables jądra Linux umożliwia eskalację uprawnień lokalnych. |
7,8 | 28,06 % | Tak | |
| Jenkins | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution. |
9,8 | > 99,99 % | Tak | |
| Safari / iOS and iPadOS / macOS (+2 produktów) | Apple Multiple Products WebKit Type Confusion Vulnerability Błąd typu confusion w Safari umożliwia zdalne wykonanie kodu przez złośliwe treści. |
8,8 | 10,59 % | Tak | |
| DIR-859 | D-Link DIR-859 Router Path Traversal Vulnerability D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling… |
9,8 | 82,71 % | Tak | |
| NetScaler ADC | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. |
7,5 | 57,63 % | Tak | |
| NetScaler ADC / NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP. |
8,8 | 3,19 % | Tak | |
| Chrome | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome,… |
8,8 | 3,8 % | Tak | |
| Confluence Data Center / Confluence Server | Atlassian Confluence Data Center and Server Template Injection Vulnerability Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution. |
9,8 | 99,98 % | Tak | |
| ICS / IPS | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Wstrzyknięcie poleceń w Ivanti Connect Secure umożliwia wykonanie dowolnych komend przez administratora. |
9,1 | > 99,99 % | Tak | |
| ICS / IPS | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Obejście uwierzytelnienia w Ivanti ICS umożliwia zdalny dostęp do zastrzeżonych zasobów. |
8,2 | 99,98 % | Tak | |
| GitLab | GitLab Community and Enterprise Editions Improper Access Control Vulnerability GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover. |
9,8 | 94,46 % | Tak | |
| iOS and iPadOS | Apple iOS and iPadOS Use-After-Free Vulnerability Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges. |
7,8 | 1,96 % | Tak | |
| tvOS / macOS / iOS and iPadOS (+1 produktów) | Apple Multiple Products Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication. |
7,0 | 0,49 % | Tak | |
| linux | Linux Kernel Use-After-Free Vulnerability Błąd użycia po zwolnieniu pamięci w nftables umożliwia potencjalne wykonanie złośliwego kodu. |
7,8 | 10,2 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.