Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| App Installer | Microsoft Windows AppX Installer Spoofing Vulnerability Podrabianie w instalatorze AppX w Windows umożliwia ataki phishingowe z złośliwymi załącznikami. |
7,1 | 11,29 % | Tak | |
| Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) (+24 produktów) | Microsoft Windows Privilege Escalation Vulnerability Luka w Windows Common Log File System Driver umożliwia eskalację uprawnień. |
7,8 | 3,28 % | Tak | |
| Apache Log4j | Apache Log4j2 Deserialization of Untrusted Data Vulnerability Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations. |
9,0 | 99,98 % | Tak | |
| GitLab | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API. |
7,5 | 36,14 % | Tak | |
| Desktop Central | Zoho Desktop Central Authentication Bypass Vulnerability Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server. |
9,8 | 99,87 % | Tak | |
| Apache Log4j2 | Apache Log4j2 Remote Code Execution Vulnerability Wykorzystanie funkcji JNDI w Apache Log4j2 pozwala na zdalne wykonanie kodu przez atakującego. |
10,0 | > 99,99 % | Tak | |
| Ivanti EPM | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Wstrzyknięcie kodu w Ivanti EPM Cloud Services Appliance umożliwia nieautoryzowane wykonanie kodu. |
9,8 | 99,11 % | Tak | |
| WARP / IPVPN / MPVPN | FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. |
8,8 | 39,68 % | Tak | |
| SonicWall SMA100 | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution. |
9,8 | 99,91 % | Tak | |
| grafana | Grafana Path Traversal Vulnerability Grafana contains a path traversal vulnerability that could allow access to local files. |
5,0 | 88,5 % | Tak | |
| AjaxPro.2 | Ajax.NET Professional Deserialization of Untrusted Data Vulnerability Deserializacja niezaufanych danych w ajaxpro.2 umożliwia zdalne wykonanie kodu. |
9,8 | 82,58 % | Tak | |
| ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution |
9,8 | 93,51 % | Tak | |
| Chrome | Google Chromium Intents Improper Input Validation Vulnerability Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome,… |
6,1 | 4,95 % | Tak | |
| Chrome | Google Chromium V8 Memory Corruption Vulnerability Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. |
8,8 | 38,57 % | Tak | |
| Roundcube Webmail | Roundcube Webmail SQL Injection Vulnerability Roundcube Webmail is vulnerable to SQL injection via search or search_params. |
9,8 | 69,88 % | Tak | |
| metabase | Metabase GeoJSON API Local File Inclusion Vulnerability Lokalne włączenie plików w Metabase umożliwia atakującemu dostęp do wrażliwych danych. |
7,5 | 97,18 % | Tak | |
| Microsoft Exchange Server 2016 Cumulative Update 21 / Microsoft Exchange Server 2016 Cumulative Update 22 / Microsoft Exchange Server 2019… | Microsoft Exchange Server Remote Code Execution Vulnerability Luka w Microsoft Exchange Server umożliwia zdalne wykonanie kodu. |
6,5 | 91,74 % | Tak | |
| Microsoft 365 Apps for Enterprise / Microsoft Excel 2013 Service Pack 1 / Microsoft Excel 2016 (+6 produktów) | Microsoft Excel Security Feature Bypass Obejście zabezpieczeń w Microsoft Excel umożliwia nieautoryzowany dostęp do danych. |
6,8 | 43 % | Tak | |
| Windows Server 2008 R2 Service Pack 1 / Windows Server 2008 R2 Service Pack 1 (Server Core installation) / Windows Server 2008 Service Pack 2 (+12… | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Podatność w Active Directory umożliwia eskalację uprawnień w systemie. |
6,5 | 77,17 % | Tak | |
| Windows Server 2008 R2 Service Pack 1 / Windows Server 2008 R2 Service Pack 1 (Server Core installation) / Windows Server 2008 Service Pack 2 (+12… | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Podatność w Active Directory umożliwia eskalację uprawnień. |
6,5 | 73,3 % | Tak | |
| Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 (+23 produktów) | Microsoft Windows Installer Privilege Escalation Vulnerability Wykorzystanie luki w Windows Installer umożliwia eskalację uprawnień. |
4,6 | 19,45 % | Tak | |
| XP | Sitecore XP Remote Command Execution Vulnerability Atak na niebezpieczną deserializację w Sitecore XP umożliwia zdalne wykonanie kodu. |
9,8 | 97,4 % | Tak | |
| BillQuick Web Suite | BQE BillQuick Web Suite SQL Injection Vulnerability BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution. |
9,8 | 75,18 % | Tak | |
| macOS | Apple Multiple Products Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges. |
7,8 | 28,84 % | Tak | |
| Device Management | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution. |
9,8 | 83,65 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 15:02 UTC – 15.11.2026, 20:17 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.