Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| MiVoice Connect | Mitel MiVoice Connect Command Injection Vulnerability The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system. |
6,8 | 10,57 % | Tak | |
| Audinate Dante Application Library for Windows | Dante Discovery Process Control Vulnerability Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code. |
7,8 | 8,33 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+16 produktów) | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability Luka w Windows CNG umożliwia eskalację uprawnień do systemu. |
7,8 | 3,05 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+15 produktów) | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability Luka w językach skryptowych Windows umożliwia zdalne wykonanie kodu. |
8,8 | 24,62 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+11 produktów) | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Obejście zabezpieczeń Mark of the Web w Windows umożliwia uruchomienie złośliwego kodu. |
5,4 | 2,25 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+22 produktów) | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Podatność w Windows Print Spooler umożliwia eskalację uprawnień. |
7,8 | 2,63 % | Tak | |
| Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 22 / Microsoft Exchange Server 2016… | Microsoft Exchange Server Privilege Escalation Vulnerability Podatność w Microsoft Exchange Server umożliwia eskalację uprawnień. |
9,8 | 77,33 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+11 produktów) | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Obejście zabezpieczeń Mark of the Web w Windows umożliwia uruchomienie złośliwego kodu. |
5,4 | 3,15 % | Tak | |
| Auditor | Netwrix Auditor Insecure Object Deserialization Vulnerability Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the NT AUTHORITY\SYSTEM user. Successful exploitation requires that the attacker is able to reach port 9004/TCP,… |
9,8 | 36,01 % | Tak | |
| Chrome | Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge,… |
8,8 | 7,92 % | Tak | |
| iOS and iPadOS | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kernel privileges. |
7,8 | 1,06 % | Tak | |
| Mali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. |
8,8 | 18,46 % | Tak | |
| DSL-2750B Devices | D-Link DSL-2750B Devices Command Injection Vulnerability D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter. |
9,8 | 65,78 % | Tak | |
| Web Applications Desktop Integrator | Oracle E-Business Suite Unspecified Vulnerability Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. |
9,8 | 98,34 % | Tak | |
| Fortinet FortiOS, FortiProxy, FortiSwitchManager | Fortinet Multiple Products Authentication Bypass Vulnerability Obejście uwierzytelnienia w FortiOS umożliwia nieautoryzowanym atakującym dostęp do interfejsu administracyjnego. |
9,8 | 99,98 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+21 produktów) | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation. |
7,8 | 1,89 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+15 produktów) | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions. |
7,8 | 14,95 % | Tak | |
| Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 22 / Microsoft Exchange Server 2019… | Microsoft Exchange Server Server-Side Request Forgery Vulnerability Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution. |
8,8 | 99,96 % | Tak | |
| Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 22 / Microsoft Exchange Server 2019… | Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution. |
8,0 | 99,97 % | Tak | |
| Cisco Catalyst SD-WAN / Cisco Catalyst SD-WAN Manager / Cisco SD-WAN vContainer (+2 produktów) | Cisco SD-WAN Path Traversal Vulnerability Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. |
7,8 | 11,98 % | Tak | |
| Chrome | Google Chromium Mojo Insufficient Data Validation Vulnerability Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium,… |
9,6 | 5,77 % | Tak | |
| Chrome | Google Chromium Intents Insufficient Input Validation Vulnerability Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google… |
6,5 | 4,56 % | Tak | |
| Chrome | Google Chromium Network Service Use-After-Free Vulnerability Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft… |
8,8 | 24,93 % | Tak | |
| Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Luka w Zimbra Collaboration pozwala na przesyłanie dowolnych plików, co prowadzi do nieautoryzowanego dostępu do kont użytkowników. |
9,8 | 95,48 % | Tak | |
| Sophos Firewall | Sophos Firewall Code Injection Vulnerability A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution. |
9,8 | 98,91 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.