Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Acrobat Reader | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution. |
7,8 | 7,46 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+5 produktów) | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation. |
7,8 | 27,91 % | Tak | |
| Microsoft Office 2019 / Microsoft 365 Apps for Enterprise / Microsoft Office LTSC 2021 (+2 produktów) | Microsoft Word Information Disclosure Vulnerability Microsoft Word contains an unspecified vulnerability that allows for information disclosure. |
6,5 | 19,57 % | Tak | |
| Chrome / libwebp | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec. |
8,8 | 99,98 % | Tak | |
| iOS and iPadOS / tvOS / macOS (+1 produktów) | Apple Multiple Products Code Execution Vulnerability Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file. |
7,8 | 1,39 % | Tak | |
| Android | Android Framework Privilege Escalation Vulnerability Android Framework contains an unspecified vulnerability that allows for privilege escalation. |
7,8 | 2,64 % | Tak | |
| RT-AX55 | ASUS RT-AX55 Routers OS Command Injection Vulnerability ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346. |
8,8 | 39,51 % | Tak | |
| iOS and iPadOS / watchOS | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064. |
7,8 | 4,41 % | Tak | |
| macOS / iOS and iPadOS | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061. |
7,8 | 53,4 % | Tak | |
| Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Błąd w VPN Cisco ASA umożliwia atakującemu zdalne przeprowadzenie ataku brute force na hasła. |
9,1 | 26,62 % | Tak | |
| Chrome | Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. |
8,8 | 41,38 % | Tak | |
| Sense | Qlik Sense HTTP Tunneling Vulnerability Luka w tunelowaniu żądań HTTP w Qlik Sense umożliwia zdalne podniesienie uprawnień. |
9,9 | 88,22 % | Tak | |
| Sense | Qlik Sense Path Traversal Vulnerability Luka przejścia ścieżki w Qlik Sense umożliwia zdalnemu atakującemu generowanie anonimowej sesji. |
6,5 | 84,84 % | Tak | |
| KNX Protocol Connection Authorization Option 1 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability W urządzeniach KNX z autoryzacją połączeń możliwe jest zablokowanie dostępu przez atakującego. |
7,5 | 1,36 % | Tak | |
| WinRAR | RARLAB WinRAR Code Execution Vulnerability Luka w WinRAR umożliwia zdalne wykonanie kodu przy otwieraniu pliku ZIP. |
7,8 | 99,82 % | Tak | |
| MobileIron Sentry | Ivanti Sentry Authentication Bypass Vulnerability Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. |
9,8 | 99,95 % | Tak | |
| Junos OS | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to… |
5,3 | 89,96 % | Tak | |
| Junos OS | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the… |
9,8 | 95,07 % | Tak | |
| Junos OS | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is… |
5,3 | 93,47 % | Tak | |
| Junos OS | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an… |
5,3 | 83,46 % | Tak | |
| EPMM | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application. |
9,8 | > 99,99 % | Tak | |
| macOS / tvOS / Safari (+2 produktów) | Apple Multiple Products Unspecified Vulnerability Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. |
8,8 | 3,21 % | Tak | |
| .NET 6.0 / .NET 7.0 / ASP.NET Core 2.1 (+3 produktów) | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability Podatność w .NET i Visual Studio umożliwia zdalne wywołanie odmowy usługi. |
7,5 | 14,13 % | Tak | |
| BioTime | ZKTeco BioTime Path Traversal Vulnerability Wrażliwość na przejście ścieżki w API ZKTeco BioTime pozwala nieautoryzowanym atakującym na odczyt dowolnych plików. |
7,5 | 92,47 % | Tak | |
| EPMM | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if… |
7,2 | 63,58 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.