KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in…
Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor window. Attackers can craft a story file whose script calls the twineElectron openWithScratchFile IPC bridge to write and open a .bat file,…
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via an external directory or AAA service…
Luka w Lenovo Accessories and Display Manager umożliwia lokalnemu użytkownikowi wykonanie kodu z podwyższonymi uprawnieniami.
Nieprawidłowe uprawnienia w Lenovo Dock Manager umożliwiają lokalnemu użytkownikowi wykonanie kodu z podwyższonymi uprawnieniami.
TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file itself, whose META-INF/services/javax.sound.midi.Soundbank entry names an attacker-supplied class stored in that archive.…
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause…
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute…
A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by address with `txm_module_object_deallocate`. The manager released it whatever was in it, including a control block the kernel was still using. Deallocation…
The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The common Module Manager hands its range check the module instance, the start address and the complete byte size; the Cortex-A7 implementation discarded the instance and the size and…
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and…
libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track…
Błąd zapisu poza granicami w AMDGV_CMD_GET_DIAG_DATA umożliwia lokalnemu użytkownikowi eskalację uprawnień.
Przepełnienie bufora w FFmpeg umożliwia zdalne wykonanie kodu przez złośliwy plik WTV.
Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows…
Nieograniczony upload niebezpiecznych plików w Innorix WP pozwala na wgranie powłoki sieciowej.
Błędne uprawnienia plików w Planet9 umożliwiają lokalnym użytkownikom wykonanie kodu z uprawnieniami SYSTEM.
Eskalacja uprawnień lokalnych umożliwia wykonanie dowolnego kodu jako użytkownik uprzywilejowany.
A vulnerability has been found in Radarr 5.28.0.10274. The affected element is an unknown function of the file C:\ProgramData\Radarr\bin\Radarr.Console.exe of the component Service. Such manipulation leads to incorrect default permissions. The attack can only be performed from a local environment.…
Ibexa is a composable end-to-end DXP (Digital Experience Platform). Versions 5.0.0-beta1 through 5.0.3 do not have password validation. During the transition from v4 to v5 an error was introduced into validation code which causes the validation of the previous password not to run as expected. This…
W OpenClaw luka w API WebSocket umożliwia wstrzyknięcie poleceń jako użytkownik bramy.
A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The…
Niepoprawna ścieżka usługi w SonarQube umożliwia lokalnym atakującym uzyskanie uprawnień SYSTEM.
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.
Błąd autoryzacji w open-iscsi pozwala nieuprzywilejowanym użytkownikom lokalnym na dostęp do gniazda kontrolnego isscsiuio.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in… |
Obserwuj | 8,5 | 0,15 % | ||
| Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story… | Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor window. Attackers can craft a story file whose script calls the twineElectron openWithScratchFile IPC bridge to write and open a .bat file,… |
Obserwuj | 8,5 | 0,15 % | ||
| An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session… | An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via an external directory or AAA service… |
Obserwuj | 8,0 | 2,65 % | ||
| Luka w Lenovo Accessories and Display Manager umożliwia lokalnemu użytkownikowi wykonanie kodu z podwyższonymi uprawnieniami. | Luka w Lenovo Accessories and Display Manager umożliwia lokalnemu użytkownikowi wykonanie kodu z podwyższonymi uprawnieniami. |
Obserwuj | 8,5 | 0,15 % | ||
| Nieprawidłowe uprawnienia w Lenovo Dock Manager umożliwiają lokalnemu użytkownikowi wykonanie kodu z podwyższonymi uprawnieniami. | Nieprawidłowe uprawnienia w Lenovo Dock Manager umożliwiają lokalnemu użytkownikowi wykonanie kodu z podwyższonymi uprawnieniami. |
Obserwuj | 8,5 | 0,15 % | ||
| TuxGuitar is an open-source guitar tablature editor. | TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file itself, whose META-INF/services/javax.sound.midi.Soundbank entry names an attacker-supplied class stored in that archive.… |
Obserwuj | 8,5 | 0,15 % | ||
| libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap… | libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause… |
Obserwuj | 8,5 | 0,15 % | ||
| A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). | A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute… |
Obserwuj | 8,5 | 0,15 % | ||
| A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory… | A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by address with `txm_module_object_deallocate`. The manager released it whatever was in it, including a control block the kernel was still using. Deallocation… |
Obserwuj | 8,5 | 0,15 % | ||
| The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. | The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The common Module Manager hands its range check the module instance, the start address and the complete byte size; the Cortex-A7 implementation discarded the instance and the size and… |
Obserwuj | 8,5 | 0,15 % | ||
| A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local… | A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and… |
Obserwuj | 8,5 | 0,15 % | ||
| libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer… | libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track… |
Obserwuj | 8,5 | 0,15 % | ||
| Błąd zapisu poza granicami w AMDGV_CMD_GET_DIAG_DATA umożliwia lokalnemu użytkownikowi eskalację uprawnień. | Błąd zapisu poza granicami w AMDGV_CMD_GET_DIAG_DATA umożliwia lokalnemu użytkownikowi eskalację uprawnień. |
Obserwuj | 8,5 | 0,15 % | ||
| Przepełnienie bufora w FFmpeg umożliwia zdalne wykonanie kodu przez złośliwy plik WTV. | Przepełnienie bufora w FFmpeg umożliwia zdalne wykonanie kodu przez złośliwy plik WTV. |
Obserwuj | 8,5 | 0,15 % | ||
| Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local… | Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows… |
Obserwuj | 8,5 | 0,14 % | ||
| Nieograniczony upload niebezpiecznych plików w Innorix WP pozwala na wgranie powłoki sieciowej. | Nieograniczony upload niebezpiecznych plików w Innorix WP pozwala na wgranie powłoki sieciowej. |
Obserwuj | 8,5 | 0,14 % | ||
| Błędne uprawnienia plików w Planet9 umożliwiają lokalnym użytkownikom wykonanie kodu z uprawnieniami SYSTEM. | Błędne uprawnienia plików w Planet9 umożliwiają lokalnym użytkownikom wykonanie kodu z uprawnieniami SYSTEM. |
Obserwuj | 8,5 | 0,14 % | ||
| Eskalacja uprawnień lokalnych umożliwia wykonanie dowolnego kodu jako użytkownik uprzywilejowany. | Eskalacja uprawnień lokalnych umożliwia wykonanie dowolnego kodu jako użytkownik uprzywilejowany. |
Obserwuj | 8,5 | 0,14 % | ||
| A vulnerability has been found in Radarr 5.28.0.10274. | A vulnerability has been found in Radarr 5.28.0.10274. The affected element is an unknown function of the file C:\ProgramData\Radarr\bin\Radarr.Console.exe of the component Service. Such manipulation leads to incorrect default permissions. The attack can only be performed from a local environment.… |
Obserwuj | 8,5 | 0,14 % | ||
| Ibexa is a composable end-to-end DXP (Digital Experience Platform). | Ibexa is a composable end-to-end DXP (Digital Experience Platform). Versions 5.0.0-beta1 through 5.0.3 do not have password validation. During the transition from v4 to v5 an error was introduced into validation code which causes the validation of the previous password not to run as expected. This… |
Obserwuj | 8,5 | 0,14 % | ||
| W OpenClaw luka w API WebSocket umożliwia wstrzyknięcie poleceń jako użytkownik bramy. | W OpenClaw luka w API WebSocket umożliwia wstrzyknięcie poleceń jako użytkownik bramy. |
Obserwuj | 8,4 | 0,64 % | ||
| A vulnerability was found in Sonarr 4.0.15.2940. | A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The… |
Obserwuj | 8,5 | 0,14 % | ||
| Niepoprawna ścieżka usługi w SonarQube umożliwia lokalnym atakującym uzyskanie uprawnień SYSTEM. | Niepoprawna ścieżka usługi w SonarQube umożliwia lokalnym atakującym uzyskanie uprawnień SYSTEM. |
Obserwuj | 8,5 | 0,14 % | ||
| Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server. | Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server. |
Obserwuj | 8,5 | 0,13 % | ||
| Błąd autoryzacji w open-iscsi pozwala nieuprzywilejowanym użytkownikom lokalnym na dostęp do gniazda kontrolnego isscsiuio. | Błąd autoryzacji w open-iscsi pozwala nieuprzywilejowanym użytkownikom lokalnym na dostęp do gniazda kontrolnego isscsiuio. |
Obserwuj | 8,5 | 0,13 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.