KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Luka w rozszerzeniu iCagenda dla Joomla umożliwia przesyłanie dowolnych plików, co prowadzi do wykonania kodu PHP.
Nieokreślona podatność w Adobe Flash Player umożliwia zdalne wykonanie dowolnego kodu.
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.
Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.
Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Podatność na podwójne zwolnienie w Adobe Flash Player umożliwia zdalne wykonanie kodu.
Windows NTFS Elevation of Privilege Vulnerability
Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Interfejs WAP w Trihedral VTScada umożliwia zdalnym atakującym wywołanie awarii aplikacji.
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
Luka w językach skryptowych Windows umożliwia zdalne wykonanie kodu.
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
Przepełnienie bufora w FreeType umożliwia zdalne wykonanie kodu.
A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
Luka w SKYSEA Client View umożliwia zdalne wykonanie kodu przez błędne przetwarzanie uwierzytelnienia.
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.
Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Wstrzyknięcie SQL w Sangoma Switchvox umożliwia zdalne wykonanie dowolnych poleceń w bazie danych.
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this…
An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to…
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been…
Wykorzystanie po zwolnieniu pamięci w Adobe Flash Player umożliwia zdalne wykonanie kodu.
Brak uwierzytelnienia w Invoker Servlet na SAP NetWeaver umożliwia zdalne wykonanie kodu.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Luka w rozszerzeniu iCagenda dla Joomla umożliwia przesyłanie dowolnych plików, co prowadzi do wykonania kodu PHP. | Luka w rozszerzeniu iCagenda dla Joomla umożliwia przesyłanie dowolnych plików, co prowadzi do wykonania kodu PHP. |
Pilne działanie | 9,8 | 20,07 % | ||
| Nieokreślona podatność w Adobe Flash Player umożliwia zdalne wykonanie dowolnego kodu. | Nieokreślona podatność w Adobe Flash Player umożliwia zdalne wykonanie dowolnego kodu. |
Pilne działanie | 9,8 | 20,06 % | ||
| Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain… | Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance. |
Pilne działanie | 10,0 | 19,05 % | ||
| Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode… | Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands. |
Pilne działanie | 8,4 | 26,94 % | ||
| Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption… | Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Pilne działanie | 8,8 | 24,93 % | ||
| Podatność na podwójne zwolnienie w Adobe Flash Player umożliwia zdalne wykonanie kodu. | Podatność na podwójne zwolnienie w Adobe Flash Player umożliwia zdalne wykonanie kodu. |
Pilne działanie | 8,8 | 24,82 % | ||
| Windows NTFS Elevation of Privilege Vulnerability | Windows NTFS Elevation of Privilege Vulnerability |
Pilne działanie | 9,3 | 22,27 % | ||
| Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted… | Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Pilne działanie | 8,8 | 24,73 % | ||
| Interfejs WAP w Trihedral VTScada umożliwia zdalnym atakującym wywołanie awarii aplikacji. | Interfejs WAP w Trihedral VTScada umożliwia zdalnym atakującym wywołanie awarii aplikacji. |
Pilne działanie | 7,5 | 31,17 % | ||
| A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check… | A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server. |
Pilne działanie | 9,8 | 19,65 % | ||
| Luka w językach skryptowych Windows umożliwia zdalne wykonanie kodu. | Luka w językach skryptowych Windows umożliwia zdalne wykonanie kodu. |
Pilne działanie | 8,8 | 24,62 % | ||
| Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
Pilne działanie | 8,8 | 24,54 % | ||
| An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary… | An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution. |
Pilne działanie | 9,8 | 19,48 % | ||
| The issue was addressed with improved checks. | The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. |
Pilne działanie | 8,8 | 24,35 % | ||
| Przepełnienie bufora w FreeType umożliwia zdalne wykonanie kodu. | Przepełnienie bufora w FreeType umożliwia zdalne wykonanie kodu. |
Pilne działanie | 8,1 | 27,78 % | ||
| A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code… | A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface. |
Pilne działanie | 7,2 | 32,25 % | ||
| Luka w SKYSEA Client View umożliwia zdalne wykonanie kodu przez błędne przetwarzanie uwierzytelnienia. | Luka w SKYSEA Client View umożliwia zdalne wykonanie kodu przez błędne przetwarzanie uwierzytelnienia. |
Pilne działanie | 9,8 | 19,23 % | ||
| A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970. |
Pilne działanie | 7,5 | 30,68 % | ||
| Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted… | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Pilne działanie | 8,8 | 24,03 % | ||
| Wstrzyknięcie SQL w Sangoma Switchvox umożliwia zdalne wykonanie dowolnych poleceń w bazie danych. | Wstrzyknięcie SQL w Sangoma Switchvox umożliwia zdalne wykonanie dowolnych poleceń w bazie danych. |
Pilne działanie | 9,8 | 18,98 % | ||
| A type confusion issue was addressed with improved checks. | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this… |
Pilne działanie | 8,8 | 23,97 % | ||
| An issue was discovered in Veritas Backup Exec before 21.2. | An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to… |
Pilne działanie | 8,8 | 23,95 % | ||
| A memory corruption issue was addressed with improved memory handling. | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been… |
Pilne działanie | 7,8 | 28,84 % | ||
| Wykorzystanie po zwolnieniu pamięci w Adobe Flash Player umożliwia zdalne wykonanie kodu. | Wykorzystanie po zwolnieniu pamięci w Adobe Flash Player umożliwia zdalne wykonanie kodu. |
Pilne działanie | 9,8 | 18,83 % | ||
| Brak uwierzytelnienia w Invoker Servlet na SAP NetWeaver umożliwia zdalne wykonanie kodu. | Brak uwierzytelnienia w Invoker Servlet na SAP NetWeaver umożliwia zdalne wykonanie kodu. |
Pilne działanie | 10,0 | 17,77 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.