Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the OAuth session cookie lacks SameSite. Attackers can lure authenticated users to malicious pages that POST to /api/worker/shutdown, /api/worker/pool/restart, or /api/task/revoke…
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability is…
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the…
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise…
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate…
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested.
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker…
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise…
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access.
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the OAuth session cookie lacks SameSite. Attackers can lure authenticated users to malicious pages that POST to /api/worker/shutdown, /api/worker/pool/restart, or /api/task/revoke…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability is…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,11 % · rekomendacja wg zapisanej polityki