KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this cookie via COOKIE-ECHO,…
In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recv_dless_read() receives a P_DATA_REPLY from a peer into the bio of an outstanding read request. The peer-supplied payload length reaches it as the signed int…
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication.
Wykonanie dowolnych poleceń na systemie ofiary w Open Source GPT Researcher przez interakcję z złośliwą stroną.
Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token. Passing a callback to the constructor selects OAuth 1.0a. get_request_token then revokes that choice when the request token response omits…
Błąd w kernelu Linux w vxlan pozwala na nieprawidłowe przetwarzanie nagłówków sieciowych.
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). udp_tunnel_sock_release() could set sk->sk_user_data to NULL while vxlan_gro_prepare_receive() is running. Let's check if rcu_dereference_sk_user_data() is…
In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC completion rl_kref formerly served two distinct lifetimes through a single refcount: it gated when a Reply could wake its RPC task, and it gated when an rpcrdma_req could return to its…
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Sashiko pointed out that there are a few lockless RCU readers using test_bit() which is a relaxed atomic operation and provides no memory barrier…
In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of xdp_redirect_arr array is ENETC_MAX_SKB_FRAGS. However, the number of fragments contained in xdp_frame may be greater than or equal to ENETC_MAX_SKB_FRAGS,…
Nieprawidłowe zamykanie gniazd tunelowych UDP w jądrze Linux może prowadzić do wycieków zasobów.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Brak kontroli uprawnień w ksmbd pozwala na nadpisanie danych w pliku na udziale tylko do odczytu.
Błąd w Symfony pozwala na manipulację zmiennymi środowiskowymi przez złośliwe ciągi zapytań.
Wstrzyknięcie SQL w OpenProject umożliwia nieautoryzowany dostęp do danych.
Wstrzyknięcie LDAP w serwerze XKMS Apache CXF umożliwia pobranie dowolnych certyfikatów.
Błąd w logice uwierzytelniania webhooków w IBM Langflow pozwala na zdalne wykonanie kodu.
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE conn->preauth_info is shared connection state (struct preauth_integrity_info, kmalloc-96) that is allocated and freed by the SMB2 NEGOTIATE handler and…
Błędy w Firefoxie mogą prowadzić do uszkodzenia pamięci i potencjalnego wykonania kodu.
Błędy w Firefoxie i Thunderbirdzie mogą prowadzić do usunięcia danych lub zdalnego wykonania kodu.
Błąd w jądrze Linuxa pozwala na nieprawidłowe wywołanie funkcji BPF w zamkniętym gnieździe.
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ [..] noticed a potential memory bug and header corruption involving the SIP…
In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero offset nvmet_rdma_use_inline_sg() maps the host-controlled inline data offset into the per-command inline scatterlist. The bounds check admits any offset with off + len <=…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
W tym tygodniu | 9,8 | 0,72 % | ||
| In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP… | In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this cookie via COOKIE-ECHO,… |
W tym tygodniu | 9,8 | 0,72 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload… | In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recv_dless_read() receives a P_DATA_REPLY from a peer into the bio of an outstanding read request. The peer-supplied payload length reaches it as the signed int… |
W tym tygodniu | 9,8 | 0,72 % | ||
| IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication. | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication. |
W tym tygodniu | 9,8 | 0,72 % | ||
| Wykonanie dowolnych poleceń na systemie ofiary w Open Source GPT Researcher przez interakcję z złośliwą stroną. | Wykonanie dowolnych poleceń na systemie ofiary w Open Source GPT Researcher przez interakcję z złośliwą stroną. |
W tym tygodniu | 9,8 | 0,72 % | ||
| Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in… | Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token. Passing a callback to the constructor selects OAuth 1.0a. get_request_token then revokes that choice when the request token response omits… |
W tym tygodniu | 9,8 | 0,72 % | ||
| Błąd w kernelu Linux w vxlan pozwala na nieprawidłowe przetwarzanie nagłówków sieciowych. | Błąd w kernelu Linux w vxlan pozwala na nieprawidłowe przetwarzanie nagłówków sieciowych. |
W tym tygodniu | 9,8 | 0,72 % | ||
| In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in… | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). udp_tunnel_sock_release() could set sk->sk_user_data to NULL while vxlan_gro_prepare_receive() is running. Let's check if rcu_dereference_sk_user_data() is… |
W tym tygodniu | 9,8 | 0,72 % | ||
| In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC completion rl_kref… | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC completion rl_kref formerly served two distinct lifetimes through a single refcount: it gated when a Reply could wake its RPC task, and it gated when an rpcrdma_req could return to its… |
W tym tygodniu | 9,8 | 0,72 % | ||
| In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockless RCU readers in… | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Sashiko pointed out that there are a few lockless RCU readers using test_bit() which is a relaxed atomic operation and provides no memory barrier… |
W tym tygodniu | 9,8 | 0,72 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of… | In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of xdp_redirect_arr array is ENETC_MAX_SKB_FRAGS. However, the number of fragments contained in xdp_frame may be greater than or equal to ENETC_MAX_SKB_FRAGS,… |
W tym tygodniu | 9,8 | 0,72 % | ||
| Nieprawidłowe zamykanie gniazd tunelowych UDP w jądrze Linux może prowadzić do wycieków zasobów. | Nieprawidłowe zamykanie gniazd tunelowych UDP w jądrze Linux może prowadzić do wycieków zasobów. |
W tym tygodniu | 9,8 | 0,72 % | ||
| The issue was addressed with improved memory handling. | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory. |
W tym tygodniu | 9,8 | 0,72 % | ||
| The issue was addressed with improved memory handling. | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory. |
W tym tygodniu | 9,8 | 0,72 % | ||
| Brak kontroli uprawnień w ksmbd pozwala na nadpisanie danych w pliku na udziale tylko do odczytu. | Brak kontroli uprawnień w ksmbd pozwala na nadpisanie danych w pliku na udziale tylko do odczytu. |
W tym tygodniu | 9,8 | 0,72 % | ||
| Błąd w Symfony pozwala na manipulację zmiennymi środowiskowymi przez złośliwe ciągi zapytań. | Błąd w Symfony pozwala na manipulację zmiennymi środowiskowymi przez złośliwe ciągi zapytań. |
W tym tygodniu | 9,8 | 0,72 % | ||
| Wstrzyknięcie SQL w OpenProject umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w OpenProject umożliwia nieautoryzowany dostęp do danych. |
W tym tygodniu | 9,9 | 0,22 % | ||
| Wstrzyknięcie LDAP w serwerze XKMS Apache CXF umożliwia pobranie dowolnych certyfikatów. | Wstrzyknięcie LDAP w serwerze XKMS Apache CXF umożliwia pobranie dowolnych certyfikatów. |
W tym tygodniu | 9,8 | 0,72 % | ||
| Błąd w logice uwierzytelniania webhooków w IBM Langflow pozwala na zdalne wykonanie kodu. | Błąd w logice uwierzytelniania webhooków w IBM Langflow pozwala na zdalne wykonanie kodu. |
W tym tygodniu | 9,8 | 0,72 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2… | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE conn->preauth_info is shared connection state (struct preauth_integrity_info, kmalloc-96) that is allocated and freed by the SMB2 NEGOTIATE handler and… |
W tym tygodniu | 9,8 | 0,72 % | ||
| Błędy w Firefoxie mogą prowadzić do uszkodzenia pamięci i potencjalnego wykonania kodu. | Błędy w Firefoxie mogą prowadzić do uszkodzenia pamięci i potencjalnego wykonania kodu. |
W tym tygodniu | 9,8 | 0,72 % | ||
| Błędy w Firefoxie i Thunderbirdzie mogą prowadzić do usunięcia danych lub zdalnego wykonania kodu. | Błędy w Firefoxie i Thunderbirdzie mogą prowadzić do usunięcia danych lub zdalnego wykonania kodu. |
W tym tygodniu | 9,8 | 0,72 % | ||
| Błąd w jądrze Linuxa pozwala na nieprawidłowe wywołanie funkcji BPF w zamkniętym gnieździe. | Błąd w jądrze Linuxa pozwala na nieprawidłowe wywołanie funkcji BPF w zamkniętym gnieździe. |
W tym tygodniu | 9,8 | 0,71 % | ||
| In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale data pointer quoting… | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ [..] noticed a potential memory bug and header corruption involving the SIP… |
W tym tygodniu | 9,8 | 0,71 % | ||
| In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero… | In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero offset nvmet_rdma_use_inline_sg() maps the host-controlled inline data offset into the per-command inline scatterlist. The bounds check admits any offset with off + len <=… |
W tym tygodniu | 9,8 | 0,71 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.