KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Obejście ochrony SSRF w misp-modules pozwala na dostęp do wewnętrznych usług serwera.
Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Błąd use after free w Chromecast w Google Chrome umożliwia zdalne wykonanie kodu.
Nieprawidłowa autoryzacja w Microsoft Edge umożliwia zdalne wykonanie kodu przez nieautoryzowanego atakującego.
Przepełnienie bufora w Gogs umożliwia dostęp do hostów w lokalnych CIDR-ach przez webhooks.
Luka w bramie AAP umożliwia przejęcie konta przez manipulację adresem e-mail.
Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)
YAML alias bomb w HedgeDoc powoduje DoS przez nadmierne zużycie CPU przy przetwarzaniu notatek.
Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network.
Obejście ochrony SSRF w n8n umożliwia atakującym dostęp do wewnętrznych usług.
OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a…
The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts…
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.…
Wstrzyknięcie poleceń w Animate umożliwia zdalne wykonanie kodu po otwarciu złośliwego pliku.
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
Luka w Oracle Data Integrator pozwala na nieautoryzowany dostęp i modyfikację danych.
Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity:…
Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
W Gitea przed 1.27.0 występuje podatność SSRF, która umożliwia atakującym dostęp do wewnętrznych usług.
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The issue CRUD endpoints (`GET / PATCH / DELETE /workspaces/{workspace_id}/issues/{issue_id}`) gate access on…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Obejście ochrony SSRF w misp-modules pozwala na dostęp do wewnętrznych usług serwera. | Obejście ochrony SSRF w misp-modules pozwala na dostęp do wewnętrznych usług serwera. |
Obserwuj | 8,3 | 0,4 % | ||
| Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process… | Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,3 | 0,4 % | ||
| Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
Obserwuj | 8,3 | 0,4 % | ||
| Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer… | Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,3 | 0,4 % | ||
| Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
Obserwuj | 8,3 | 0,4 % | ||
| Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,3 | 0,4 % | ||
| Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the… | Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,3 | 0,4 % | ||
| Błąd use after free w Chromecast w Google Chrome umożliwia zdalne wykonanie kodu. | Błąd use after free w Chromecast w Google Chrome umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,3 | 0,4 % | ||
| Nieprawidłowa autoryzacja w Microsoft Edge umożliwia zdalne wykonanie kodu przez nieautoryzowanego atakującego. | Nieprawidłowa autoryzacja w Microsoft Edge umożliwia zdalne wykonanie kodu przez nieautoryzowanego atakującego. |
Obserwuj | 8,3 | 0,4 % | ||
| Przepełnienie bufora w Gogs umożliwia dostęp do hostów w lokalnych CIDR-ach przez webhooks. | Przepełnienie bufora w Gogs umożliwia dostęp do hostów w lokalnych CIDR-ach przez webhooks. |
Obserwuj | 8,3 | 0,4 % | ||
| Luka w bramie AAP umożliwia przejęcie konta przez manipulację adresem e-mail. | Luka w bramie AAP umożliwia przejęcie konta przez manipulację adresem e-mail. |
Obserwuj | 8,3 | 0,4 % | ||
| Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the… | Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High) |
Obserwuj | 8,3 | 0,4 % | ||
| YAML alias bomb w HedgeDoc powoduje DoS przez nadmierne zużycie CPU przy przetwarzaniu notatek. | YAML alias bomb w HedgeDoc powoduje DoS przez nadmierne zużycie CPU przy przetwarzaniu notatek. |
Obserwuj | 8,3 | 0,4 % | ||
| Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network. | Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network. |
Obserwuj | 8,3 | 0,4 % | ||
| Obejście ochrony SSRF w n8n umożliwia atakującym dostęp do wewnętrznych usług. | Obejście ochrony SSRF w n8n umożliwia atakującym dostęp do wewnętrznych usług. |
Obserwuj | 8,3 | 0,4 % | ||
| OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows… | OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a… |
Obserwuj | 8,3 | 0,39 % | ||
| The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. | The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts… |
Obserwuj | 8,3 | 0,39 % | ||
| Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.… |
Obserwuj | 8,3 | 0,39 % | ||
| Wstrzyknięcie poleceń w Animate umożliwia zdalne wykonanie kodu po otwarciu złośliwego pliku. | Wstrzyknięcie poleceń w Animate umożliwia zdalne wykonanie kodu po otwarciu złośliwego pliku. |
Obserwuj | 8,2 | 0,89 % | ||
| Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality… | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to… |
Obserwuj | 8,3 | 0,39 % | ||
| Luka w Oracle Data Integrator pozwala na nieautoryzowany dostęp i modyfikację danych. | Luka w Oracle Data Integrator pozwala na nieautoryzowany dostęp i modyfikację danych. |
Obserwuj | 8,3 | 0,39 % | ||
| Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the… | Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity:… |
Obserwuj | 8,3 | 0,39 % | ||
| Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process… | Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,3 | 0,39 % | ||
| W Gitea przed 1.27.0 występuje podatność SSRF, która umożliwia atakującym dostęp do wewnętrznych usług. | W Gitea przed 1.27.0 występuje podatność SSRF, która umożliwia atakującym dostęp do wewnętrznych usług. |
Obserwuj | 8,3 | 0,39 % | ||
| PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The issue CRUD endpoints (`GET / PATCH / DELETE /workspaces/{workspace_id}/issues/{issue_id}`) gate access on… |
Obserwuj | 8,3 | 0,39 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.