Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Pulse Connect Secure | Ivanti Pulse Connect Secure Command Injection Vulnerability Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles. |
8,8 | 22,92 % | Tak | |
| Pulse Secure Secure | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface. |
7,2 | 14,15 % | Tak | |
| VMware vCenter Server and VMware Cloud Foundation | VMware vCenter Server Improper Input Validation Vulnerability Luka w vSphere Client umożliwia zdalne wykonanie kodu przez brak walidacji wejścia. |
9,8 | > 99,99 % | Tak | |
| Trusted Firmware | Arm Trusted Firmware Out-of-Bounds Write Vulnerability Błąd w Arm Trusted Firmware M umożliwia nieautoryzowane wywołanie funkcji zabezpieczających. |
5,5 | 3,06 % | Tak | |
| Mali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. |
8,8 | 2,99 % | Tak | |
| HBS 3 | QNAP NAS Improper Authorization Vulnerability QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device. |
9,8 | 78,25 % | Tak | |
| Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 9 / Microsoft Exchange Server 2016 Cumulative… | Microsoft Exchange Server Security Feature Bypass Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass. |
6,5 | 99,78 % | Tak | |
| Windows 10 Version 2004 / Windows Server version 2004 / Windows 10 Version 20H2 (+1 produktów) | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution. |
7,5 | 99,87 % | Tak | |
| Mali Graphics Processing Unit (GPU) | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information. |
8,8 | 12,08 % | Tak | |
| Mali Graphics Processing Unit (GPU) | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes. |
8,8 | 5,45 % | Tak | |
| AC11 Router | Tenda AC11 Router Stack Buffer Overflow Vulnerability Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request. |
9,8 | 86,51 % | Tak | |
| Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultaneously. |
7,8 | 1,54 % | Tak | |
| Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistration on failure can lead to new GPU address allocation failure. |
5,5 | 0,52 % | Tak | |
| Routers | ASUS Routers Improper Authentication Vulnerability ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. |
9,8 | 99,39 % | Tak | |
| Cisco HyperFlex HX Data Platform | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user. |
9,8 | 99,92 % | Tak | |
| Cisco HyperFlex HX Data Platform | Cisco HyperFlex HX Data Platform Command Injection Vulnerability Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user. |
9,8 | > 99,99 % | Tak | |
| dbutil | Dell dbutil Driver Insufficient Access Control Vulnerability Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure. |
7,8 | 79,63 % | Tak | |
| Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 | Arcadyan Buffalo Firmware Path Traversal Vulnerability Arcadyan Buffalo firmware contains a path traversal vulnerability that could allow unauthenticated, remote attackers to bypass authentication and access sensitive information. This vulnerability affects multiple routers across several different vendors. |
9,8 | 99,98 % | Tak | |
| Chrome | Google Chromium Blink Use-After-Free Vulnerability Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and… |
8,8 | 9,31 % | Tak | |
| Chrome | Google Chromium V8 Improper Input Validation Vulnerability Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome,… |
8,8 | 70,44 % | Tak | |
| Chrome | Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and… |
8,8 | 84,17 % | Tak | |
| ExifTool | ExifTool Remote Code Execution Vulnerability Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image |
7,8 | 99,98 % | Tak | |
| GitLab | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Nieprawidłowa walidacja plików obrazów w GitLab umożliwia zdalne wykonanie kodu. |
10,0 | 99,73 % | Tak | |
| Pulse Connect Secure | Ivanti Pulse Connect Secure Use-After-Free Vulnerability Obejście uwierzytelnienia w Pulse Connect Secure umożliwia zdalne wykonanie kodu. |
10,0 | 47,51 % | Tak | |
| Email Security | SonicWall Email Security Path Traversal Vulnerability Luka w SonicWall Email Security pozwala atakującemu po uwierzytelnieniu na odczytanie dowolnego pliku. |
4,9 | 51,69 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 15:02 UTC – 15.11.2026, 20:17 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.