Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Novi Survey | Novi Survey Insecure Deserialization Vulnerability Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account. |
9,8 | 2,69 % | Tak | |
| iOS and iPadOS / Safari / macOS | Apple Multiple Products WebKit Use-After-Free Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely… |
8,8 | 27,08 % | Tak | |
| iOS and iPadOS / macOS | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges. |
8,6 | 23,22 % | Tak | |
| Mali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Information Disclosure Vulnerability Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata. |
3,3 | 1,22 % | Tak | |
| Sophos Web Appliance | Sophos Web Appliance Command Injection Vulnerability Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution. |
9,8 | > 99,99 % | Tak | |
| Pentaho Business Analytics Server | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization. |
9,8 | 92,27 % | Tak | |
| Pentaho Business Analytics Server | Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution. |
7,2 | 97,67 % | Tak | |
| Android | Android Framework Privilege Escalation Vulnerability Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed. |
7,8 | 1,47 % | Tak | |
| Cobalt Strike | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution. |
9,8 | 2,71 % | Tak | |
| ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user. |
9,8 | 16,99 % | Tak | |
| ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution. |
9,8 | 97,34 % | Tak | |
| Kernel | Linux Kernel Improper Ownership Management Vulnerability Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug… |
7,8 | 7,88 % | Tak | |
| minio | MinIO Information Disclosure Vulnerability MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosure. |
7,5 | 83,96 % | Tak | |
| minio | MinIO Security Feature Bypass Vulnerability MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket` to conduct privilege escalation. To carry out this attack, the attacker requires… |
8,8 | 7,92 % | Tak | |
| DIR-820 Router | D-Link DIR-820 Router OS Command Injection Vulnerability D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp. |
9,8 | 97,86 % | Tak | |
| AG/vxAG ArrayOS | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability Wykonanie kodu zdalnego w Array Networks AG Series umożliwia przeglądanie systemu plików bez uwierzytelnienia. |
9,8 | 68,08 % | Tak | |
| TP-Link Archer AX21 (AX1800) | TP-Link Archer AX-21 Command Injection Vulnerability TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution. |
8,8 | > 99,99 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+9 produktów) | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file. |
4,4 | 78,15 % | Tak | |
| Microsoft Office LTSC 2021 / Microsoft Outlook 2016 / Microsoft 365 Apps for Enterprise (+2 produktów) | Microsoft Office Outlook Privilege Escalation Vulnerability Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user. |
9,8 | 97,16 % | Tak | |
| Veeam Backup & Replication | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may… |
7,5 | 80,6 % | Tak | |
| FortiOS | Fortinet FortiOS Path Traversal Vulnerability Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands. |
7,1 | 10,68 % | Tak | |
| webkitgtk | WebKitGTK Memory Corruption Vulnerability Wykonanie złośliwego kodu w WebKit przez przetwarzanie złośliwych treści internetowych. |
8,8 | 1,56 % | Tak | |
| iOS and iPadOS / Safari / macOS | Apple Multiple Products WebKit Type Confusion Vulnerability Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely… |
8,8 | 9,5 % | Tak | |
| Aspera Faspex | IBM Aspera Faspex Code Execution Vulnerability IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw. |
9,8 | 99,97 % | Tak | |
| Joomla! CMS | Joomla! Improper Access Control Vulnerability Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints. |
5,3 | 99,81 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.