Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Cisco Small Business RV Series Router Firmware | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or… |
7,8 | 9,75 % | Tak | |
| Cisco Small Business RV Series Router Firmware | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or… |
8,0 | 9,2 % | Tak | |
| Cisco Small Business RV Series Router Firmware | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or… |
8,0 | 14,86 % | Tak | |
| Cisco Small Business RV Series Router Firmware | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or… |
9,8 | 72,46 % | Tak | |
| SAP NetWeaver and ABAP Platform / SAP Web Dispatcher / SAP Content Server | SAP Multiple Products HTTP Request Smuggling Vulnerability SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the… |
10,0 | 97,95 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+22 produktów) | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation. |
7,2 | 18,46 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+22 produktów) | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation. |
4,6 | 41,01 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+7 produktów) | Microsoft Windows Runtime Remote Code Execution Vulnerability Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution. |
9,3 | 53,93 % | Tak | |
| Zimbra Collaborate Suite (ZCS) | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability Wstrzyknięcie kodu w Zimbra Collaboration Suite pozwala na wykonanie złośliwego JavaScriptu. |
6,1 | 30,93 % | Tak | |
| polkit | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Błąd w pkexec umożliwia lokalną eskalację uprawnień dla nieuprzywilejowanych użytkowników. |
7,8 | 94,92 % | Tak | |
| RLC-410W IP Camera | Reolink RLC-410W IP Camera OS Command Injection Vulnerability Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality. |
7,2 | 47,64 % | Tak | |
| Kernel | Linux Kernel Privilege Escalation Vulnerability Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation. |
7,0 | 6,59 % | Tak | |
| Access Manager | Oracle Fusion Middleware Unspecified Vulnerability Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product. |
7,5 | 96,28 % | Tak | |
| NVRmini2 Devices | NUUO NVRmini2 Devices Missing Authentication Vulnerability NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users. |
9,8 | 48,5 % | Tak | |
| Frontend | Zabbix Frontend Authentication Bypass Vulnerability Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML. |
9,8 | 95,68 % | Tak | |
| Frontend | Zabbix Frontend Improper Access Control Vulnerability Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend. |
5,3 | 95,26 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+22 produktów) | Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. |
6,9 | 2,57 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+7 produktów) | Microsoft Win32k Privilege Escalation Vulnerability Podatność w Win32k umożliwia eskalację uprawnień na systemie Windows. |
7,8 | 59,21 % | Tak | |
| Samsung Mobile Devices | Samsung Mobile Devices Use-After-Free Vulnerability Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution. |
7,8 | 0,42 % | Tak | |
| Serv-U | SolarWinds Serv-U Improper Input Validation Vulnerability SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization. |
5,3 | 3,64 % | Tak | |
| Fortinet FortiOS | Fortinet FortiOS Arbitrary File Download Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files. |
7,8 | 0,91 % | Tak | |
| USAHERDS | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel. |
8,1 | 17,44 % | Tak | |
| VMware Workspace ONE UEM console | Omnissa Workspace ONE Server-Side Request Forgery Podatność SSRF w VMware Workspace ONE UEM umożliwia dostęp do wrażliwych danych bez uwierzytelnienia. |
7,5 | 99,68 % | Tak | |
| Android | Android Kernel Use-After-Free Vulnerability Android kernel contains a use-after-free vulnerability that allows for privilege escalation. |
7,8 | 1,06 % | Tak | |
| Android | Android Kernel Race Condition Vulnerability Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation. |
6,4 | 0,87 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 15:02 UTC – 15.11.2026, 20:17 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.