KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition…
Wstrzyknięcie kodu w WebsiteBaker CMS pozwala na zdalne wykonanie kodu przez nieautoryzowanych użytkowników.
Obejście uwierzytelnienia w Crabbox umożliwia podszywanie się pod innych użytkowników.
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and…
Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding…
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.…
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie. Because management endpoints do not universally require a CSRF token or perform Origin or…
Wykorzystanie luki w PipeWire pozwala na ucieczkę z aplikacji w piaskownicy i wykonanie kodu.
Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the…
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The…
Nieprawidłowa izolacja zasobów w pamięci podręcznej procesora AMD Zen2 może prowadzić do uszkodzenia instrukcji.
In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas->hwpt_list twice The hwpt is added to the hwpt_list only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the…
Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/query_runner/query_results.py accepts param_query_N_{key=value} parameters and passed attacker-controlled values to replace_query_parameters() for raw…
W Streambert przed 2.5.0 podatny renderer może kopiować pliki do wybranej lokalizacji, narażając dane.
Nieprawidłowe ograniczenie ścieżki w narzędziu get_resource w Amazon awslabs.aws-transform-mcp-server pozwala na zapis plików poza zamierzonym…
Wykonanie zdalnego kodu w OpenKM umożliwia administratorom uruchamianie dowolnych poleceń.
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's remaining capacity, corrupting off-heap memory and…
renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then escape the jail root via fchdir(2). This requires the directory to reside on a filesystem that is also reachable from the jail's root. A…
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote…
Nieprawidłowa kontrola dostępu w Pexip Infinity pozwala na zdalne wykonanie kodu przez lokalnego atakującego.
Użycie pożyczonego uchwytu w IOMMUFD prowadzi do wykorzystania po zwolnieniu pamięci.
Luka w HPE IceWall umożliwia manipulację odpowiedziami SAML, co pozwala na podszywanie się pod użytkowników.
Podatność CSRF w MISP pozwala na nieautoryzowane usunięcie wydarzeń bez interakcji użytkownika.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
Obserwuj | 8,8 | 0,19 % | ||
| IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems… | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition… |
Obserwuj | 8,8 | 0,19 % | ||
| Wstrzyknięcie kodu w WebsiteBaker CMS pozwala na zdalne wykonanie kodu przez nieautoryzowanych użytkowników. | Wstrzyknięcie kodu w WebsiteBaker CMS pozwala na zdalne wykonanie kodu przez nieautoryzowanych użytkowników. |
Obserwuj | 8,6 | 1,19 % | ||
| Obejście uwierzytelnienia w Crabbox umożliwia podszywanie się pod innych użytkowników. | Obejście uwierzytelnienia w Crabbox umożliwia podszywanie się pod innych użytkowników. |
Obserwuj | 8,7 | 0,69 % | ||
| An authentication flaw exists in the Brocade ASCG administrative management service component. | An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and… |
Obserwuj | 8,8 | 0,19 % | ||
| Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. | Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding… |
Obserwuj | 8,7 | 0,69 % | ||
| Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled… | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
Obserwuj | 8,8 | 0,19 % | ||
| ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the… | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.… |
Obserwuj | 8,8 | 0,19 % | ||
| Nginx UI is a web user interface for the Nginx web server. | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie. Because management endpoints do not universally require a CSRF token or perform Origin or… |
Obserwuj | 8,8 | 0,19 % | ||
| Wykorzystanie luki w PipeWire pozwala na ucieczkę z aplikacji w piaskownicy i wykonanie kodu. | Wykorzystanie luki w PipeWire pozwala na ucieczkę z aplikacji w piaskownicy i wykonanie kodu. |
Obserwuj | 8,8 | 0,19 % | ||
| Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. | Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the… |
Obserwuj | 8,7 | 0,69 % | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a… | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The… |
Obserwuj | 8,8 | 0,18 % | ||
| Nieprawidłowa izolacja zasobów w pamięci podręcznej procesora AMD Zen2 może prowadzić do uszkodzenia instrukcji. | Nieprawidłowa izolacja zasobów w pamięci podręcznej procesora AMD Zen2 może prowadzić do uszkodzenia instrukcji. |
Obserwuj | 8,8 | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas->hwpt_list twice The… | In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas->hwpt_list twice The hwpt is added to the hwpt_list only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the… |
Obserwuj | 8,8 | 0,18 % | ||
| Redash is a package for data visualization and sharing. | Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/query_runner/query_results.py accepts param_query_N_{key=value} parameters and passed attacker-controlled values to replace_query_parameters() for raw… |
Obserwuj | 8,7 | 0,68 % | ||
| W Streambert przed 2.5.0 podatny renderer może kopiować pliki do wybranej lokalizacji, narażając dane. | W Streambert przed 2.5.0 podatny renderer może kopiować pliki do wybranej lokalizacji, narażając dane. |
Obserwuj | 8,8 | 0,18 % | ||
| Nieprawidłowe ograniczenie ścieżki w narzędziu get_resource w Amazon awslabs.aws-transform-mcp-server pozwala na zapis plików poza… | Nieprawidłowe ograniczenie ścieżki w narzędziu get_resource w Amazon awslabs.aws-transform-mcp-server pozwala na zapis plików poza zamierzonym… |
Obserwuj | 8,8 | 0,18 % | ||
| Wykonanie zdalnego kodu w OpenKM umożliwia administratorom uruchamianie dowolnych poleceń. | Wykonanie zdalnego kodu w OpenKM umożliwia administratorom uruchamianie dowolnych poleceń. |
Obserwuj | 8,6 | 1,18 % | ||
| snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end… | snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's remaining capacity, corrupting off-heap memory and… |
Obserwuj | 8,7 | 0,68 % | ||
| renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. | renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then escape the jail root via fchdir(2). This requires the directory to reside on a filesystem that is also reachable from the jail's root. A… |
Obserwuj | 8,8 | 0,18 % | ||
| Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote… |
Obserwuj | 8,8 | 0,18 % | ||
| Nieprawidłowa kontrola dostępu w Pexip Infinity pozwala na zdalne wykonanie kodu przez lokalnego atakującego. | Nieprawidłowa kontrola dostępu w Pexip Infinity pozwala na zdalne wykonanie kodu przez lokalnego atakującego. |
Obserwuj | 8,8 | 0,18 % | ||
| Użycie pożyczonego uchwytu w IOMMUFD prowadzi do wykorzystania po zwolnieniu pamięci. | Użycie pożyczonego uchwytu w IOMMUFD prowadzi do wykorzystania po zwolnieniu pamięci. |
Obserwuj | 8,8 | 0,18 % | ||
| Luka w HPE IceWall umożliwia manipulację odpowiedziami SAML, co pozwala na podszywanie się pod użytkowników. | Luka w HPE IceWall umożliwia manipulację odpowiedziami SAML, co pozwala na podszywanie się pod użytkowników. |
Obserwuj | 8,8 | 0,18 % | ||
| Podatność CSRF w MISP pozwala na nieautoryzowane usunięcie wydarzeń bez interakcji użytkownika. | Podatność CSRF w MISP pozwala na nieautoryzowane usunięcie wydarzeń bez interakcji użytkownika. |
Obserwuj | 8,8 | 0,18 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.