KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.
Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Wstrzyknięcie SQL w Sangoma Switchvox umożliwia zdalne wykonanie dowolnych poleceń w bazie danych.
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this…
An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to…
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been…
Wykorzystanie po zwolnieniu pamięci w Adobe Flash Player umożliwia zdalne wykonanie kodu.
Brak uwierzytelnienia w Invoker Servlet na SAP NetWeaver umożliwia zdalne wykonanie kodu.
Korupcja pamięci w systemach Apple umożliwia zdalne wykonanie kodu przez złośliwe pliki multimedialne.
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Błąd w jądrze Windows umożliwia lokalnym użytkownikom eskalację uprawnień przez 16-bitowe aplikacje.
Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.
Problem użycia po zwolnieniu pamięci w systemach Apple umożliwia eskalację uprawnień.
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7…
Podatność w sterowniku Windows Common Log File System umożliwia eskalację uprawnień.
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content…
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN…
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from…
Luka use-after-free w komponencie nf_tables jądra Linux umożliwia eskalację uprawnień lokalnych.
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have…
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to…
Microsoft Exchange Remote Code Execution Vulnerability
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970. |
Pilne działanie | 7,5 | 30,68 % | ||
| Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted… | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Pilne działanie | 8,8 | 24,03 % | ||
| Wstrzyknięcie SQL w Sangoma Switchvox umożliwia zdalne wykonanie dowolnych poleceń w bazie danych. | Wstrzyknięcie SQL w Sangoma Switchvox umożliwia zdalne wykonanie dowolnych poleceń w bazie danych. |
Pilne działanie | 9,8 | 18,98 % | ||
| A type confusion issue was addressed with improved checks. | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this… |
Pilne działanie | 8,8 | 23,97 % | ||
| An issue was discovered in Veritas Backup Exec before 21.2. | An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to… |
Pilne działanie | 8,8 | 23,95 % | ||
| A memory corruption issue was addressed with improved memory handling. | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been… |
Pilne działanie | 7,8 | 28,84 % | ||
| Wykorzystanie po zwolnieniu pamięci w Adobe Flash Player umożliwia zdalne wykonanie kodu. | Wykorzystanie po zwolnieniu pamięci w Adobe Flash Player umożliwia zdalne wykonanie kodu. |
Pilne działanie | 9,8 | 18,83 % | ||
| Brak uwierzytelnienia w Invoker Servlet na SAP NetWeaver umożliwia zdalne wykonanie kodu. | Brak uwierzytelnienia w Invoker Servlet na SAP NetWeaver umożliwia zdalne wykonanie kodu. |
Pilne działanie | 10,0 | 17,77 % | ||
| Korupcja pamięci w systemach Apple umożliwia zdalne wykonanie kodu przez złośliwe pliki multimedialne. | Korupcja pamięci w systemach Apple umożliwia zdalne wykonanie kodu przez złośliwe pliki multimedialne. |
Pilne działanie | 9,8 | 18,75 % | ||
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 28,74 % | ||
| Błąd w jądrze Windows umożliwia lokalnym użytkownikom eskalację uprawnień przez 16-bitowe aplikacje. | Błąd w jądrze Windows umożliwia lokalnym użytkownikom eskalację uprawnień przez 16-bitowe aplikacje. |
Pilne działanie | 7,8 | 28,74 % | ||
| Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks. | Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks. |
Pilne działanie | 7,5 | 30,04 % | ||
| Problem użycia po zwolnieniu pamięci w systemach Apple umożliwia eskalację uprawnień. | Problem użycia po zwolnieniu pamięci w systemach Apple umożliwia eskalację uprawnień. |
Pilne działanie | 10,0 | 17,51 % | ||
| Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a… | Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Pilne działanie | 8,8 | 23,51 % | ||
| An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to… | An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7… |
Pilne działanie | 9,8 | 18,38 % | ||
| Podatność w sterowniku Windows Common Log File System umożliwia eskalację uprawnień. | Podatność w sterowniku Windows Common Log File System umożliwia eskalację uprawnień. |
Pilne działanie | 7,8 | 28,28 % | ||
| A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an… | A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content… |
Pilne działanie | 9,8 | 18,21 % | ||
| A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the… | A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN… |
Pilne działanie | 8,4 | 25,15 % | ||
| A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from… |
Pilne działanie | 7,5 | 29,61 % | ||
| Luka use-after-free w komponencie nf_tables jądra Linux umożliwia eskalację uprawnień lokalnych. | Luka use-after-free w komponencie nf_tables jądra Linux umożliwia eskalację uprawnień lokalnych. |
Pilne działanie | 7,8 | 28,06 % | ||
| A memory corruption issue was addressed with improved state management. | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have… |
Pilne działanie | 8,8 | 22,95 % | ||
| A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote… | A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature |
Pilne działanie | 8,8 | 22,92 % | ||
| Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability | Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 27,91 % | ||
| A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to… | A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to… |
Pilne działanie | 7,5 | 29,12 % | ||
| Microsoft Exchange Remote Code Execution Vulnerability | Microsoft Exchange Remote Code Execution Vulnerability |
Pilne działanie | 6,0 | 36,51 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.