Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| linux kernel | Linux Kernel Privilege Escalation Vulnerability The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation. |
7,8 | 49,17 % | Tak | |
| QTS / QuTS hero | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution. |
9,8 | 33,99 % | Tak | |
| Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 (+7 produktów) | Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. |
4,6 | 8,4 % | Tak | |
| Email Security | SonicWall Email Security Improper Privilege Management Vulnerability Luka w SonicWall Email Security umożliwia utworzenie konta administratora przez spreparowane żądanie HTTP. |
9,8 | 88,78 % | Tak | |
| Email Security | SonicWall Email Security Unrestricted Upload of File Vulnerability Luka w SonicWall Email Security umożliwia atakującemu po uwierzytelnieniu przesłanie dowolnego pliku. |
7,2 | 16,64 % | Tak | |
| iOS and iPadOS / macOS | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. |
9,8 | 7,71 % | Tak | |
| iOS and iPadOS / macOS | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. |
9,8 | 7 % | Tak | |
| iOS and iPadOS / iOS / watchOS | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple… |
6,1 | 7,08 % | Tak | |
| iOS and iPadOS / macOS | Apple Multiple Products Race Condition Vulnerability Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges. |
7,0 | 2,2 % | Tak | |
| iOS and iPadOS / macOS | Apple Multiple Products Type Confusion Vulnerability A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution. |
8,8 | 13,98 % | Tak | |
| VMware vRealize Operations | VMware Server Side Request Forgery in vRealize Operations Manager API Atak Server Side Request Forgery w vRealize Operations Manager API pozwala na kradzież danych uwierzytelniających. |
7,5 | 78 % | Tak | |
| BIG-IP | F5 BIG-IP Traffic Management Microkernel Buffer Overflow The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls. |
9,8 | 62,42 % | Tak | |
| BIG-IP; BIG-IQ | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services. |
9,8 | 99,9 % | Tak | |
| Samsung Mobile Devices | Samsung Mobile Devices Improper Access Control Vulnerability Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370. |
5,5 | 1,08 % | Tak | |
| Samsung Mobile Devices | Samsung Mobile Devices Memory Corruption Vulnerability Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369. |
4,4 | 0,89 % | Tak | |
| Samsung Mobile Devices | Samsung Mobile Devices Unspecified Vulnerability Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP. |
6,7 | 0,8 % | Tak | |
| Samsung Mobile Devices | Samsung Mobile Devices Improper Boundary Check Vulnerability Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access. |
6,7 | 0,8 % | Tak | |
| Access Manager. | Micro Focus Access Manager Information Leakage Vulnerability Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used. |
7,5 | 25,7 % | Tak | |
| Chrome | Google Chromium Blink Use-After-Free Vulnerability Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and… |
8,8 | 9,95 % | Tak | |
| Internet Explorer 11 | Microsoft Internet Explorer Remote Code Execution Vulnerability Luka w Internet Explorerze umożliwia zdalne wykonanie kodu. |
7,6 | 5,45 % | Tak | |
| Microsoft Office 2010 Service Pack 2 / Microsoft Office 2013 Service Pack 1 / Microsoft Office 2016 | Microsoft Office Remote Code Execution Vulnerability Wykonanie zdalnego kodu w Microsoft Office umożliwia atakującym przejęcie kontroli nad systemem. |
8,5 | 6,08 % | Tak | |
| Internet Explorer 11 / Internet Explorer 9 / Microsoft Edge (EdgeHTML-based) | Microsoft Internet Explorer Memory Corruption Vulnerability Uszkodzenie pamięci w Internet Explorer umożliwia zdalne wykonanie kodu. |
5,1 | 81,67 % | Tak | |
| Chrome | Google Chromium Race Condition Vulnerability Google Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. |
8,8 | 24,03 % | Tak | |
| Samsung Mobile Devices | Samsung Mobile Devices Improper Access Control Vulnerability Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370. |
7,1 | 2,81 % | Tak | |
| Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this… |
9,8 | 63,63 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 15:02 UTC – 15.11.2026, 20:17 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.