Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval.
The pattern given to test(), match(), or the match and =~ conditions of select() is placed in a `qr'...'` literal and compiled as source text, so a `(?{ ... })` code…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the sequence number embedded in the semaphore set's IPC identifier to detect whether the set was removed while the caller was asleep. This sequence number is only 15 bits wide.…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href value with a TAB byte in the URL scheme, causing filterURL to produce an empty protocol that bypasses the…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
cros_typec_register_partner_pdos() copies the partner PDOs from the EC
TYPEC_STATUS response into the fixed caps_desc.pdo[PDO_MAX_OBJECTS]…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Multiple Roboticsware products provided by Roboticsware PTE. LTD. register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
selinux: check connect-related permissions on TCP Fast Open
Similar to Landlock, SELinux was not updated when TCP Fast Open
support was introduced to ensure connect-related permissions are
checked when using TCP Fast Open.…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because `gx_page_header_data_size` is never validated against the glyph data a page actually contains, the two passes can read…
Opis źródłowy NVD · ENCVSS 8,4 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval.
The pattern given to test(), match(), or the match and =~ conditions of select() is placed in a `qr'...'` literal and compiled as source text, so a `(?{ ... })` code…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the sequence number embedded in the semaphore set's IPC identifier to detect whether the set was removed while the caller was asleep. This sequence number is only 15 bits wide.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href value with a TAB byte in the URL scheme, causing filterURL to produce an empty protocol that bypasses the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
cros_typec_register_partner_pdos() copies the partner PDOs from the EC
TYPEC_STATUS response into the fixed caps_desc.pdo[PDO_MAX_OBJECTS]…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Multiple Roboticsware products provided by Roboticsware PTE. LTD. register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
selinux: check connect-related permissions on TCP Fast Open
Similar to Landlock, SELinux was not updated when TCP Fast Open
support was introduced to ensure connect-related permissions are
checked when using TCP Fast Open.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because `gx_page_header_data_size` is never validated against the glyph data a page actually contains, the two passes can read…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,4 · EPSS 0,16 % · rekomendacja wg zapisanej polityki