KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned…
Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu.
Przepełnienie bufora w implementacji SNMP pozwala zdalnemu atakującemu na wykonanie kodu.
Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu.
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before…
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Błąd walidacji adresów w protokole RDS w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień.
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned…
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
Błąd typu confusion w Safari umożliwia zdalne wykonanie kodu przez złośliwe treści.
Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Błąd w sandboxie Adobe Flash Player umożliwia zdalne wykonanie kodu przez złośliwe SWF.
Windows Print Spooler Elevation of Privilege Vulnerability
Typowe pomylenie w V8 w Google Chrome umożliwia zdalnemu atakującemu potencjalne wykorzystanie uszkodzenia sterty.
Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improper verification of signatures in PAN-OS SAML authentication enables an unauthenticated network-based attacker to access protected…
Wykonanie złośliwego kodu w Safari może prowadzić do zdalnego uruchomienia kodu.
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via… | Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
Pilne działanie | 8,8 | 11,01 % | ||
| Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. | Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later. |
Pilne działanie | 9,8 | 6 % | ||
| A use after free issue was addressed with improved memory management. | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. |
Pilne działanie | 8,8 | 10,99 % | ||
| A memory corruption issue was addressed with improved input validation. | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges. |
Pilne działanie | 7,8 | 15,94 % | ||
| A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to… | A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication. |
Pilne działanie | 8,8 | 10,9 % | ||
| Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the… | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned… |
Pilne działanie | 8,0 | 14,86 % | ||
| Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu. | Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu. |
Pilne działanie | 8,8 | 10,85 % | ||
| Przepełnienie bufora w implementacji SNMP pozwala zdalnemu atakującemu na wykonanie kodu. | Przepełnienie bufora w implementacji SNMP pozwala zdalnemu atakującemu na wykonanie kodu. |
Pilne działanie | 8,8 | 10,85 % | ||
| Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu. | Przepełnienie bufora w SNMP Cisco IOS umożliwia zdalne wykonanie kodu lub restart systemu. |
Pilne działanie | 8,8 | 10,85 % | ||
| WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged… | WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before… |
Pilne działanie | 8,8 | 10,81 % | ||
| Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
Pilne działanie | 7,2 | 18,77 % | ||
| Błąd walidacji adresów w protokole RDS w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień. | Błąd walidacji adresów w protokole RDS w jądrze Linux umożliwia lokalnym użytkownikom eskalację uprawnień. |
Pilne działanie | 7,8 | 15,74 % | ||
| Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the… | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned… |
Pilne działanie | 9,8 | 5,66 % | ||
| Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an… | Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server |
Pilne działanie | 8,0 | 14,64 % | ||
| Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML… | Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
Pilne działanie | 8,1 | 14,14 % | ||
| Błąd typu confusion w Safari umożliwia zdalne wykonanie kodu przez złośliwe treści. | Błąd typu confusion w Safari umożliwia zdalne wykonanie kodu przez złośliwe treści. |
Pilne działanie | 8,8 | 10,59 % | ||
| Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. | Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
Pilne działanie | 8,8 | 10,59 % | ||
| A memory corruption issue was addressed with improved state management. | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. |
Pilne działanie | 8,8 | 10,55 % | ||
| Błąd w sandboxie Adobe Flash Player umożliwia zdalne wykonanie kodu przez złośliwe SWF. | Błąd w sandboxie Adobe Flash Player umożliwia zdalne wykonanie kodu przez złośliwe SWF. |
Pilne działanie | 8,8 | 10,53 % | ||
| Windows Print Spooler Elevation of Privilege Vulnerability | Windows Print Spooler Elevation of Privilege Vulnerability |
Pilne działanie | 7,2 | 18,46 % | ||
| Typowe pomylenie w V8 w Google Chrome umożliwia zdalnemu atakującemu potencjalne wykorzystanie uszkodzenia sterty. | Typowe pomylenie w V8 w Google Chrome umożliwia zdalnemu atakującemu potencjalne wykorzystanie uszkodzenia sterty. |
Pilne działanie | 9,8 | 5,39 % | ||
| Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer… | Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
Pilne działanie | 9,6 | 6,36 % | ||
| When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is… | When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improper verification of signatures in PAN-OS SAML authentication enables an unauthenticated network-based attacker to access protected… |
Pilne działanie | 10,0 | 4,36 % | ||
| Wykonanie złośliwego kodu w Safari może prowadzić do zdalnego uruchomienia kodu. | Wykonanie złośliwego kodu w Safari może prowadzić do zdalnego uruchomienia kodu. |
Pilne działanie | 8,8 | 10,16 % | ||
| An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. | An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit… |
Pilne działanie | 6,1 | 23,63 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.