KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Korupcja pamięci w systemach Apple umożliwia zdalne wykonanie kodu przez złośliwe pliki multimedialne.
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Błąd w jądrze Windows umożliwia lokalnym użytkownikom eskalację uprawnień przez 16-bitowe aplikacje.
Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.
Problem użycia po zwolnieniu pamięci w systemach Apple umożliwia eskalację uprawnień.
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7…
Podatność w sterowniku Windows Common Log File System umożliwia eskalację uprawnień.
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content…
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN…
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from…
Luka use-after-free w komponencie nf_tables jądra Linux umożliwia eskalację uprawnień lokalnych.
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have…
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to…
Microsoft Exchange Remote Code Execution Vulnerability
Wstrzyknięcie poleceń w Lantronix EDS5000 umożliwia atakującym wykonanie dowolnych poleceń systemowych z uprawnieniami roota.
Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.
Luka w Internet Explorerze umożliwia atakującemu dostęp do informacji z innych domen.
Dostęp do pamięci poza przydzielonym obszarem w ANGLE w Google Chrome umożliwia zdalne wykonanie kodu.
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges.…
A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle…
Obejście mechanizmu ASLR w Internet Explorerze umożliwia zdalnym atakującym wykonanie kodu.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Korupcja pamięci w systemach Apple umożliwia zdalne wykonanie kodu przez złośliwe pliki multimedialne. | Korupcja pamięci w systemach Apple umożliwia zdalne wykonanie kodu przez złośliwe pliki multimedialne. |
Pilne działanie | 9,8 | 18,75 % | ||
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 28,74 % | ||
| Błąd w jądrze Windows umożliwia lokalnym użytkownikom eskalację uprawnień przez 16-bitowe aplikacje. | Błąd w jądrze Windows umożliwia lokalnym użytkownikom eskalację uprawnień przez 16-bitowe aplikacje. |
Pilne działanie | 7,8 | 28,74 % | ||
| Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks. | Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks. |
Pilne działanie | 7,5 | 30,04 % | ||
| Problem użycia po zwolnieniu pamięci w systemach Apple umożliwia eskalację uprawnień. | Problem użycia po zwolnieniu pamięci w systemach Apple umożliwia eskalację uprawnień. |
Pilne działanie | 10,0 | 17,51 % | ||
| Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a… | Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Pilne działanie | 8,8 | 23,51 % | ||
| An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to… | An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7… |
Pilne działanie | 9,8 | 18,38 % | ||
| Podatność w sterowniku Windows Common Log File System umożliwia eskalację uprawnień. | Podatność w sterowniku Windows Common Log File System umożliwia eskalację uprawnień. |
Pilne działanie | 7,8 | 28,28 % | ||
| A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an… | A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content… |
Pilne działanie | 9,8 | 18,21 % | ||
| A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the… | A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN… |
Pilne działanie | 8,4 | 25,15 % | ||
| A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from… |
Pilne działanie | 7,5 | 29,61 % | ||
| Luka use-after-free w komponencie nf_tables jądra Linux umożliwia eskalację uprawnień lokalnych. | Luka use-after-free w komponencie nf_tables jądra Linux umożliwia eskalację uprawnień lokalnych. |
Pilne działanie | 7,8 | 28,06 % | ||
| A memory corruption issue was addressed with improved state management. | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have… |
Pilne działanie | 8,8 | 22,95 % | ||
| A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote… | A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature |
Pilne działanie | 8,8 | 22,92 % | ||
| Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability | Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 27,91 % | ||
| A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to… | A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to… |
Pilne działanie | 7,5 | 29,12 % | ||
| Microsoft Exchange Remote Code Execution Vulnerability | Microsoft Exchange Remote Code Execution Vulnerability |
Pilne działanie | 6,0 | 36,51 % | ||
| Wstrzyknięcie poleceń w Lantronix EDS5000 umożliwia atakującym wykonanie dowolnych poleceń systemowych z uprawnieniami roota. | Wstrzyknięcie poleceń w Lantronix EDS5000 umożliwia atakującym wykonanie dowolnych poleceń systemowych z uprawnieniami roota. |
Pilne działanie | 9,3 | 19,96 % | ||
| Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a… | Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Pilne działanie | 8,8 | 22,44 % | ||
| The vCenter Server contains a privilege escalation vulnerability. | The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet. |
Pilne działanie | 9,8 | 17,36 % | ||
| Luka w Internet Explorerze umożliwia atakującemu dostęp do informacji z innych domen. | Luka w Internet Explorerze umożliwia atakującemu dostęp do informacji z innych domen. |
Pilne działanie | 8,8 | 22,33 % | ||
| Dostęp do pamięci poza przydzielonym obszarem w ANGLE w Google Chrome umożliwia zdalne wykonanie kodu. | Dostęp do pamięci poza przydzielonym obszarem w ANGLE w Google Chrome umożliwia zdalne wykonanie kodu. |
Pilne działanie | 8,8 | 22,33 % | ||
| An out-of-bounds write issue was addressed with improved input validation. | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges.… |
Pilne działanie | 8,6 | 23,22 % | ||
| A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and… | A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle… |
Pilne działanie | 6,5 | 33,65 % | ||
| Obejście mechanizmu ASLR w Internet Explorerze umożliwia zdalnym atakującym wykonanie kodu. | Obejście mechanizmu ASLR w Internet Explorerze umożliwia zdalnym atakującym wykonanie kodu. |
Pilne działanie | 6,5 | 33,58 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.