KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request. This vulnerability was…
In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. The archive's unmerge does not reverse this.
In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those actually granted to them.
openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 contain a CWD-relative configuration file resolution flaw in crypt_settings.py, where CONFIG_FILE (originally the absolute per-user path ~/.crypt_settings.json) is reassigned at line 84 to the bare relative name 'crypt_settings.json'.…
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An unauthenticated attacker on the adjacent network can recover the key and authenticate to the media…
Wykonanie zdalnego kodu w Zohocorp ManageEngine ADSelfService Plus umożliwia atak po uwierzytelnieniu.
Wstrzyknięcie złośliwego kodu w ApostropheCMS umożliwia atak XSS dla wszystkich odwiedzających stronę.
W YouTrack umożliwiono przechowywane XSS w szablonach powiadomień projektów.
Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control.…
Błędna konfiguracja proxy w runtimes-inventory-rhel8-operator umożliwia standardowym użytkownikom eskalację uprawnień.
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass,…
W joserfc przed wersją 1.6.8 akceptowane były fałszywe tokeny HMAC przy pustym kluczu weryfikacyjnym.
Niewystarczające zabezpieczenia w narzędziu do zapisu plików w Amazon Kiro IDE umożliwiają zdalne wykonanie poleceń.
Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended…
Manipulacja plikami konfiguracyjnymi przez użytkownika o niskich uprawnieniach może prowadzić do eskalacji uprawnień.
Nieprawidłowe przetwarzanie XML w Cisco Catalyst SD-WAN Manager umożliwia odczyt dowolnych plików.
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. The vulnerability is caused by unsafe copying of the portList field into an undersized buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of…
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input,…
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input,…
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve… | A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes. |
Obserwuj | 8,6 | 0,71 % | ||
| A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated… | A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request. This vulnerability was… |
Obserwuj | 8,7 | 0,21 % | ||
| In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. | In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. The archive's unmerge does not reverse this. |
Obserwuj | 8,7 | 0,21 % | ||
| In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to… | In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those actually granted to them. |
Obserwuj | 8,7 | 0,21 % | ||
| openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 contain a CWD-relative configuration file resolution flaw in… | openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 contain a CWD-relative configuration file resolution flaw in crypt_settings.py, where CONFIG_FILE (originally the absolute per-user path ~/.crypt_settings.json) is reassigned at line 84 to the bare relative name 'crypt_settings.json'.… |
Obserwuj | 8,7 | 0,21 % | ||
| A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service. | A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service. |
Obserwuj | 8,6 | 0,7 % | ||
| A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to… | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session. |
Obserwuj | 8,7 | 0,2 % | ||
| A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to… | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session. |
Obserwuj | 8,7 | 0,2 % | ||
| A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to… | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session. |
Obserwuj | 8,7 | 0,2 % | ||
| TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number… | TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An unauthenticated attacker on the adjacent network can recover the key and authenticate to the media… |
Obserwuj | 8,7 | 0,2 % | ||
| Wykonanie zdalnego kodu w Zohocorp ManageEngine ADSelfService Plus umożliwia atak po uwierzytelnieniu. | Wykonanie zdalnego kodu w Zohocorp ManageEngine ADSelfService Plus umożliwia atak po uwierzytelnieniu. |
Obserwuj | 8,4 | 1,7 % | ||
| Wstrzyknięcie złośliwego kodu w ApostropheCMS umożliwia atak XSS dla wszystkich odwiedzających stronę. | Wstrzyknięcie złośliwego kodu w ApostropheCMS umożliwia atak XSS dla wszystkich odwiedzających stronę. |
Obserwuj | 8,7 | 0,2 % | ||
| W YouTrack umożliwiono przechowywane XSS w szablonach powiadomień projektów. | W YouTrack umożliwiono przechowywane XSS w szablonach powiadomień projektów. |
Obserwuj | 8,7 | 0,2 % | ||
| Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An… | Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control.… |
Obserwuj | 8,7 | 0,2 % | ||
| Błędna konfiguracja proxy w runtimes-inventory-rhel8-operator umożliwia standardowym użytkownikom eskalację uprawnień. | Błędna konfiguracja proxy w runtimes-inventory-rhel8-operator umożliwia standardowym użytkownikom eskalację uprawnień. |
Obserwuj | 8,7 | 0,2 % | ||
| Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass,… |
Obserwuj | 8,7 | 0,19 % | ||
| W joserfc przed wersją 1.6.8 akceptowane były fałszywe tokeny HMAC przy pustym kluczu weryfikacyjnym. | W joserfc przed wersją 1.6.8 akceptowane były fałszywe tokeny HMAC przy pustym kluczu weryfikacyjnym. |
Obserwuj | 8,7 | 0,19 % | ||
| Niewystarczające zabezpieczenia w narzędziu do zapisu plików w Amazon Kiro IDE umożliwiają zdalne wykonanie poleceń. | Niewystarczające zabezpieczenia w narzędziu do zapisu plików w Amazon Kiro IDE umożliwiają zdalne wykonanie poleceń. |
Obserwuj | 8,6 | 0,69 % | ||
| Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1… | Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended… |
Obserwuj | 8,6 | 0,69 % | ||
| Manipulacja plikami konfiguracyjnymi przez użytkownika o niskich uprawnieniach może prowadzić do eskalacji uprawnień. | Manipulacja plikami konfiguracyjnymi przez użytkownika o niskich uprawnieniach może prowadzić do eskalacji uprawnień. |
Obserwuj | 8,7 | 0,19 % | ||
| Nieprawidłowe przetwarzanie XML w Cisco Catalyst SD-WAN Manager umożliwia odczyt dowolnych plików. | Nieprawidłowe przetwarzanie XML w Cisco Catalyst SD-WAN Manager umożliwia odczyt dowolnych plików. |
Obserwuj | 8,6 | 0,69 % | ||
| Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. The vulnerability is caused by unsafe copying of the portList field into an undersized buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of… |
Obserwuj | 8,6 | 0,68 % | ||
| Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function. | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input,… |
Obserwuj | 8,6 | 0,68 % | ||
| Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function. | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input,… |
Obserwuj | 8,6 | 0,68 % | ||
| Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail function. | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this… |
Obserwuj | 8,6 | 0,68 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.