Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data. |
6,1 | 49,08 %Nieaktualne | Tak | |
| tvOS / iOS and iPadOS / macOS (+1 produktów) | Apple Multiple Products Kernel Unspecified Vulnerability Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state. |
5,5 | 2,9 %Nieaktualne | Tak | |
| Safari / tvOS / iOS and iPadOS (+2 produktów) | Apple Multiple Products WebKit Code Execution Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely… |
8,8 | 18,95 %Nieaktualne | Tak | |
| Endpoint Manager Mobile | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Obejście uwierzytelnienia w Ivanti EPMM umożliwia nieautoryzowany dostęp do zasobów aplikacji. |
9,8 | > 99,99 %Nieaktualne | Tak | |
| ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. |
9,8 | 97,07 %Nieaktualne | Tak | |
| NetScaler ADC / NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Zdalne wykonanie kodu bez uwierzytelnienia w aplikacji. |
9,8 | 99,75 %Nieaktualne | Tak | |
| ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. |
7,5 | 99,79 %Nieaktualne | Tak | |
| ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. |
9,8 | 99,99 %Nieaktualne | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+17 produktów) | Microsoft Windows Search Remote Code Execution Vulnerability Podatność w Windows Search umożliwia zdalne wykonanie kodu. |
7,5 | 99,44 %Nieaktualne | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+17 produktów) | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation. |
7,8 | 44,44 %Nieaktualne | Tak | |
| Microsoft 365 Apps for Enterprise / Microsoft Office LTSC 2021 / Microsoft Office 2019 (+3 produktów) | Microsoft Outlook Security Feature Bypass Vulnerability Obejście zabezpieczeń w Microsoft Outlook umożliwia nieautoryzowany dostęp do danych. |
8,8 | 15,52 %Nieaktualne | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+17 produktów) | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation. |
7,8 | 9,97 %Nieaktualne | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+8 produktów) | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt. |
8,8 | 4,16 %Nieaktualne | Tak | |
| Citrix ShareFile Storage Zones Controller | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers. |
9,8 | 97,34 %Nieaktualne | Tak | |
| Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function. |
9,0 | 77,27 %Nieaktualne | Tak | |
| Android | Android Pixel Information Disclosure Vulnerability Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information. |
5,5 | 0,27 %Nieaktualne | Tak | |
| macOS / Safari / watchOS (+2 produktów) | Apple Multiple Products WebKit Sandbox Escape Vulnerability Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products… |
8,6 | 16,53 %Nieaktualne | Tak | |
| macOS / iOS and iPadOS / watchOS | Apple Multiple Products Integer Overflow Vulnerability Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges. |
7,8 | 58,16 %Nieaktualne | Tak | |
| macOS / iOS and iPadOS / Safari | Apple Multiple Products WebKit Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which… |
8,8 | 22,95 %Nieaktualne | Tak | |
| iOS and iPadOS / Safari / macOS | Apple Multiple Products WebKit Type Confusion Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely… |
8,8 | 23,97 %Nieaktualne | Tak | |
| macOS / Safari / watchOS (+2 produktów) | Apple Multiple Products WebKit Use-After-Free Vulnerability Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple… |
8,8 | 12,17 %Nieaktualne | Tak | |
| macOS / Safari / watchOS (+2 produktów) | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari… |
6,5 | 14,29 %Nieaktualne | Tak | |
| PaperCut NG/MF | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. |
8,8 | 28,83 %Nieaktualne | Tak | |
| NAS326 firmware / NAS540 firmware / NAS542 firmware | Zyxel Multiple NAS Devices Command Injection Vulnerability Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request. |
9,8 | 82,26 %Nieaktualne | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+8 produktów) | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. |
8,4 | 21,62 %Nieaktualne | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.