KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and…
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (All versions < V28.01.15). A BIOS vendor test key is present in the UEFI Secure Boot key database. This…
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-system commands with root privileges. The…
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction.…
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. | Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,15 % | ||
| Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. | Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,15 % | ||
| Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. | Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,15 % | ||
| Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network. | Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,15 % | ||
| Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,15 % | ||
| Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over… | Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,15 % | ||
| Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. | Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. |
Obserwuj | 7,5 | 1,15 % | ||
| Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. | Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,15 % | ||
| AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver… | AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and… |
Obserwuj | 7,7 | 0,15 % | ||
| Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. | Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,15 % | ||
| A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC… | A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (All versions < V28.01.15). A BIOS vendor test key is present in the UEFI Secure Boot key database. This… |
Obserwuj | 7,7 | 0,14 % | ||
| In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account… | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-system commands with root privileges. The… |
Obserwuj | 7,7 | 0,12 % | ||
| Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. | Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,11 % | ||
| Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to… | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,1 % | ||
| Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to… | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,1 % | ||
| Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,1 % | ||
| Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. | Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,1 % | ||
| ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction.… |
Obserwuj | 7,6 | 0,59 % | ||
| Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to… | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information… | Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,05 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.