KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this…
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via…
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can…
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service…
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe_schedule_profile function. The vulnerability is caused by repeated concatenation of the start_date, start_time, duration_time, how_often, weekdays, monthly_date, and cycle_duration fields into small fixed-size…
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of…
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted…
`_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is non-zero. A certificate whose signature is an empty ASN.1 BIT STRING therefore parses successfully and leaves the certificate holding a signature…
Brak prawidłowej walidacji podpisu SAML w Mendix SAML umożliwia przejęcie sesji przez atakujących.
Obejście weryfikacji urządzenia w authentik pozwala na nieautoryzowane logowanie.
Luka w macOS Sequoia pozwala aplikacji na opuszczenie piaskownicy.
An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the Geo Location…
An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the backup restore…
An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the management…
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via…
Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request…
openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping…
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in…
Brak nagłówka COOP w Directus umożliwia atakującym przechwycenie procesu logowania SSO.
Obejście polityki bezpieczeństwa w ImageMagick umożliwia lokalne ujawnienie plików.
Luka w jądrze Linuxa pozwala na niejawne ujawnienie stron w nieznanym stanie.
In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.x509.PKIXCertPathReviewer - applied X.509 name constraints to the end-entity certificate. checkNameConstraints walked the path with a loop…
Wstrzyknięcie skryptów w Roskus Prospero Flow CRM pozwala na przejęcie sesji użytkowników.
Brak uwierzytelnienia w Symfony pozwala na zdalne wstrzyknięcie złośliwego kodu.
Błąd w Submariner pozwala złośliwemu klastrowi na przekierowanie ruchu sieciowego z innych klastrów.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this… |
Obserwuj | 8,6 | 0,68 % | ||
| Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via… |
Obserwuj | 8,6 | 0,68 % | ||
| Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can… |
Obserwuj | 8,6 | 0,68 % | ||
| Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service… |
Obserwuj | 8,6 | 0,68 % | ||
| Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe_schedule_profile function. | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe_schedule_profile function. The vulnerability is caused by repeated concatenation of the start_date, start_time, duration_time, how_often, weekdays, monthly_date, and cycle_duration fields into small fixed-size… |
Obserwuj | 8,6 | 0,68 % | ||
| Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. | Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of… |
Obserwuj | 8,6 | 0,68 % | ||
| Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. | Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted… |
Obserwuj | 8,6 | 0,68 % | ||
| `_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that… | `_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is non-zero. A certificate whose signature is an empty ASN.1 BIT STRING therefore parses successfully and leaves the certificate holding a signature… |
Obserwuj | 8,7 | 0,18 % | ||
| Brak prawidłowej walidacji podpisu SAML w Mendix SAML umożliwia przejęcie sesji przez atakujących. | Brak prawidłowej walidacji podpisu SAML w Mendix SAML umożliwia przejęcie sesji przez atakujących. |
Obserwuj | 8,7 | 0,18 % | ||
| Obejście weryfikacji urządzenia w authentik pozwala na nieautoryzowane logowanie. | Obejście weryfikacji urządzenia w authentik pozwala na nieautoryzowane logowanie. |
Obserwuj | 8,6 | 0,68 % | ||
| Luka w macOS Sequoia pozwala aplikacji na opuszczenie piaskownicy. | Luka w macOS Sequoia pozwala aplikacji na opuszczenie piaskownicy. |
Obserwuj | 8,7 | 0,18 % | ||
| An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit… | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the Geo Location… |
Obserwuj | 8,4 | 1,68 % | ||
| An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit… | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the backup restore… |
Obserwuj | 8,4 | 1,68 % | ||
| An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit… | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the management… |
Obserwuj | 8,4 | 1,68 % | ||
| UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic… | UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via… |
Obserwuj | 8,5 | 1,17 % | ||
| Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates… | Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request… |
Obserwuj | 8,7 | 0,17 % | ||
| openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile… | openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping… |
Obserwuj | 8,7 | 0,17 % | ||
| A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in… | A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in… |
Obserwuj | 8,7 | 0,17 % | ||
| Brak nagłówka COOP w Directus umożliwia atakującym przechwycenie procesu logowania SSO. | Brak nagłówka COOP w Directus umożliwia atakującym przechwycenie procesu logowania SSO. |
Obserwuj | 8,7 | 0,17 % | ||
| Obejście polityki bezpieczeństwa w ImageMagick umożliwia lokalne ujawnienie plików. | Obejście polityki bezpieczeństwa w ImageMagick umożliwia lokalne ujawnienie plików. |
Obserwuj | 8,6 | 0,67 % | ||
| Luka w jądrze Linuxa pozwala na niejawne ujawnienie stron w nieznanym stanie. | Luka w jądrze Linuxa pozwala na niejawne ujawnienie stron w nieznanym stanie. |
Obserwuj | 8,7 | 0,17 % | ||
| In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the… | In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.x509.PKIXCertPathReviewer - applied X.509 name constraints to the end-entity certificate. checkNameConstraints walked the path with a loop… |
Obserwuj | 8,7 | 0,17 % | ||
| Wstrzyknięcie skryptów w Roskus Prospero Flow CRM pozwala na przejęcie sesji użytkowników. | Wstrzyknięcie skryptów w Roskus Prospero Flow CRM pozwala na przejęcie sesji użytkowników. |
Obserwuj | 8,6 | 0,67 % | ||
| Brak uwierzytelnienia w Symfony pozwala na zdalne wstrzyknięcie złośliwego kodu. | Brak uwierzytelnienia w Symfony pozwala na zdalne wstrzyknięcie złośliwego kodu. |
Obserwuj | 8,6 | 0,67 % | ||
| Błąd w Submariner pozwala złośliwemu klastrowi na przekierowanie ruchu sieciowego z innych klastrów. | Błąd w Submariner pozwala złośliwemu klastrowi na przekierowanie ruchu sieciowego z innych klastrów. |
Obserwuj | 8,7 | 0,16 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.