KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Luka w zarządzaniu ciasteczkami w Safari umożliwia atak typu cross-site scripting.
An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to…
Windows Print Spooler Elevation of Privilege Vulnerability
Luka w Adobe Commerce umożliwia zdalne wykonanie kodu bez interakcji użytkownika.
Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have…
Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Błąd zapisu poza granicami w Safari pozwala na obejście piaskownicy treści webowych.
A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform local file inclusion (LFI) or path traversal. Using this…
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel…
Wstrzyknięcie SQL w WebAdmin Cyberoam OS umożliwia zdalne wykonanie dowolnych poleceń SQL.
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be…
Wykorzystanie luki w FortiMail pozwala nieautoryzowanym atakującym na zapis dowolnych plików.
A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated…
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this…
Niewystarczająca walidacja danych w Google Chrome umożliwia zdalne obejście piaskownicy.
Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against…
Obejście uwierzytelnienia w SimpleHelp umożliwia zdalne uzyskanie dostępu do sesji technika.
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
Luka XSS w stronie logowania WebVPN w Cisco ASA pozwala na zdalne wstrzyknięcie skryptu.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Luka w zarządzaniu ciasteczkami w Safari umożliwia atak typu cross-site scripting. | Luka w zarządzaniu ciasteczkami w Safari umożliwia atak typu cross-site scripting. |
Pilne działanie | 6,3 | 22,59 % | ||
| An issue was discovered in Veritas Backup Exec before 21.2. | An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to… |
Pilne działanie | 8,1 | 13,52 % | ||
| Windows Print Spooler Elevation of Privilege Vulnerability | Windows Print Spooler Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 14,95 % | ||
| Luka w Adobe Commerce umożliwia zdalne wykonanie kodu bez interakcji użytkownika. | Luka w Adobe Commerce umożliwia zdalne wykonanie kodu bez interakcji użytkownika. |
Pilne działanie | 10,0 | 3,95 % | ||
| Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve… | Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker. |
Pilne działanie | 9,8 | 4,95 % | ||
| An out-of-bounds write issue was addressed with improved bounds checking. | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have… |
Pilne działanie | 8,8 | 9,93 % | ||
| Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a… | Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Pilne działanie | 8,8 | 9,87 % | ||
| Błąd zapisu poza granicami w Safari pozwala na obejście piaskownicy treści webowych. | Błąd zapisu poza granicami w Safari pozwala na obejście piaskownicy treści webowych. |
Pilne działanie | 10,0 | 3,85 % | ||
| A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with… | A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform local file inclusion (LFI) or path traversal. Using this… |
Pilne działanie | 9,8 | 4,84 % | ||
| A memory corruption issue was addressed with improved memory handling. | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges. |
Pilne działanie | 7,8 | 14,84 % | ||
| Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to… | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
Pilne działanie | 8,8 | 9,81 % | ||
| Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer… | Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
Pilne działanie | 9,6 | 5,81 % | ||
| Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to… | Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
Pilne działanie | 9,6 | 5,74 % | ||
| A memory corruption issue was addressed with improved memory handling. | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel… |
Pilne działanie | 7,8 | 14,72 % | ||
| Wstrzyknięcie SQL w WebAdmin Cyberoam OS umożliwia zdalne wykonanie dowolnych poleceń SQL. | Wstrzyknięcie SQL w WebAdmin Cyberoam OS umożliwia zdalne wykonanie dowolnych poleceń SQL. |
Pilne działanie | 9,8 | 4,7 % | ||
| An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. | An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be… |
Pilne działanie | 7,8 | 14,69 % | ||
| Wykorzystanie luki w FortiMail pozwala nieautoryzowanym atakującym na zapis dowolnych plików. | Wykorzystanie luki w FortiMail pozwala nieautoryzowanym atakującym na zapis dowolnych plików. |
Pilne działanie | 9,8 | 4,57 % | ||
| A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition… | A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated… |
Pilne działanie | 9,8 | 4,54 % | ||
| A type confusion issue was addressed with improved checks. | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this… |
Pilne działanie | 8,8 | 9,5 % | ||
| Niewystarczająca walidacja danych w Google Chrome umożliwia zdalne obejście piaskownicy. | Niewystarczająca walidacja danych w Google Chrome umożliwia zdalne obejście piaskownicy. |
Pilne działanie | 8,8 | 9,46 % | ||
| Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a… | Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Pilne działanie | 8,8 | 9,31 % | ||
| A memory corruption vulnerability was addressed with improved locking. | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against… |
Pilne działanie | 8,8 | 9,3 % | ||
| Obejście uwierzytelnienia w SimpleHelp umożliwia zdalne uzyskanie dostępu do sesji technika. | Obejście uwierzytelnienia w SimpleHelp umożliwia zdalne uzyskanie dostępu do sesji technika. |
Pilne działanie | 9,5 | 5,72 % | ||
| Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). | Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). |
Pilne działanie | 9,8 | 4,1 % | ||
| Luka XSS w stronie logowania WebVPN w Cisco ASA pozwala na zdalne wstrzyknięcie skryptu. | Luka XSS w stronie logowania WebVPN w Cisco ASA pozwala na zdalne wstrzyknięcie skryptu. |
Pilne działanie | 6,1 | 22,56 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.