KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
Błąd zapisu poza granicami w iOS może prowadzić do nieoczekiwanego zakończenia systemu.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination.
Użycie po zwolnieniu w jądrze Linuxa może prowadzić do awarii systemu.
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a use of default credentials vulnerability that allows an unauthenticated attacker to obtain remote access. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.
Brak restrykcji sandboxa w n8n pozwala na nieograniczony dostęp do systemu plików i sieci.
Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8.
Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This issue affects KBx Pro Ultimate: from n/a through <= 8.0.5.
Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue affects Captivate Sync: from n/a through <= 3.0.3.
Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through <= 2.0.9.
Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2.
Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Injection.This issue affects Scape: from n/a through <= 1.5.13.
Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a through < 1.4.8.
Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.6.
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.
W DocsGPT umożliwienie dostosowania promptów prowadzi do zdalnego wykonania kodu.
Błąd w Cursor umożliwia zdalne wykonanie kodu przez modyfikację katalogu roboczego.
Błąd w Cursor umożliwia zdalne wykonanie kodu przez zapis plików poza obszarem roboczym.
Brak uwierzytelnienia w M365 Copilot umożliwia nieautoryzowanemu atakującemu ujawnienie informacji.
Luka w PeopleSoft Enterprise PT PeopleTools umożliwia przejęcie systemu przez nieautoryzowanego atakującego.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A type confusion issue was addressed with improved memory handling. | A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination. |
W tym tygodniu | 9,8 | 0,59 % | ||
| An issue existed in the handling of environment variables. | An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination. |
W tym tygodniu | 9,8 | 0,59 % | ||
| An out-of-bounds read was addressed with improved bounds checking. | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory. |
W tym tygodniu | 9,8 | 0,59 % | ||
| An integer overflow was addressed with improved input validation. | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination. |
W tym tygodniu | 9,8 | 0,59 % | ||
| Błąd zapisu poza granicami w iOS może prowadzić do nieoczekiwanego zakończenia systemu. | Błąd zapisu poza granicami w iOS może prowadzić do nieoczekiwanego zakończenia systemu. |
W tym tygodniu | 9,8 | 0,59 % | ||
| The issue was addressed with improved memory handling. | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected system termination or corrupt kernel memory. |
W tym tygodniu | 9,8 | 0,59 % | ||
| The issue was addressed with improved memory handling. | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory. |
W tym tygodniu | 9,8 | 0,59 % | ||
| The issue was addressed with improved memory handling. | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination. |
W tym tygodniu | 9,8 | 0,59 % | ||
| Użycie po zwolnieniu w jądrze Linuxa może prowadzić do awarii systemu. | Użycie po zwolnieniu w jądrze Linuxa może prowadzić do awarii systemu. |
W tym tygodniu | 9,8 | 0,59 % | ||
| Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a use of default credentials vulnerability that allows an unauthenticated… | Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a use of default credentials vulnerability that allows an unauthenticated attacker to obtain remote access. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet. |
W tym tygodniu | 9,8 | 0,59 % | ||
| Brak restrykcji sandboxa w n8n pozwala na nieograniczony dostęp do systemu plików i sieci. | Brak restrykcji sandboxa w n8n pozwala na nieograniczony dostęp do systemu plików i sieci. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8. | Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This… | Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This issue affects KBx Pro Ultimate: from n/a through <= 8.0.5. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue… | Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue affects Captivate Sync: from n/a through <= 3.0.3. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This… | Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through <= 2.0.9. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White… | Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Injection.This issue affects Scape: from n/a… | Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Injection.This issue affects Scape: from n/a through <= 1.5.13. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a… | Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a through < 1.4.8. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets… | Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.6. |
W tym tygodniu | 9,8 | 0,58 % | ||
| IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal. | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal. |
W tym tygodniu | 9,8 | 0,58 % | ||
| W DocsGPT umożliwienie dostosowania promptów prowadzi do zdalnego wykonania kodu. | W DocsGPT umożliwienie dostosowania promptów prowadzi do zdalnego wykonania kodu. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Błąd w Cursor umożliwia zdalne wykonanie kodu przez modyfikację katalogu roboczego. | Błąd w Cursor umożliwia zdalne wykonanie kodu przez modyfikację katalogu roboczego. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Błąd w Cursor umożliwia zdalne wykonanie kodu przez zapis plików poza obszarem roboczym. | Błąd w Cursor umożliwia zdalne wykonanie kodu przez zapis plików poza obszarem roboczym. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Brak uwierzytelnienia w M365 Copilot umożliwia nieautoryzowanemu atakującemu ujawnienie informacji. | Brak uwierzytelnienia w M365 Copilot umożliwia nieautoryzowanemu atakującemu ujawnienie informacji. |
W tym tygodniu | 9,8 | 0,58 % | ||
| Luka w PeopleSoft Enterprise PT PeopleTools umożliwia przejęcie systemu przez nieautoryzowanego atakującego. | Luka w PeopleSoft Enterprise PT PeopleTools umożliwia przejęcie systemu przez nieautoryzowanego atakującego. |
W tym tygodniu | 9,8 | 0,58 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.