KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Błąd w sterowniku Intel Ethernet umożliwia lokalnym użytkownikom wykonanie kodu z uprawnieniami jądra.
Luki w Jenkins umożliwiają zdalnym atakującym uzyskanie wrażliwych informacji o zadaniach.
Wykonanie dowolnego skryptu w serwerze TrueConf umożliwia zdalny atak przez port 4307/TCP.
Atak na łańcuch dostaw w DAEMON Tools Lite umożliwia instalację złośliwego oprogramowania.
Windows MSHTML Platform Security Feature Bypass Vulnerability
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this…
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Wykonanie dowolnych poleceń w SMA1000 przez zdalnego uwierzytelnionego administratora.
Błąd zapisu poza granicami w jądrze Linux może umożliwić lokalnemu użytkownikowi eskalację uprawnień.
Obejście uwierzytelnienia w FortiOS umożliwia zdalne uzyskanie uprawnień super-admina.
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that…
Przepełnienie bufora w win32k.sys umożliwia lokalnym użytkownikom eskalację uprawnień.
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.
Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate…
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with…
JFrog Artifactory może ujawniać token anonimowego użytkownika nieautoryzowanemu wywołującemu, co naraża zasoby.
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Błąd w sterowniku Intel Ethernet umożliwia lokalnym użytkownikom wykonanie kodu z uprawnieniami jądra. | Błąd w sterowniku Intel Ethernet umożliwia lokalnym użytkownikom wykonanie kodu z uprawnieniami jądra. |
Pilne działanie | 7,8 | 9,01 % | ||
| Luki w Jenkins umożliwiają zdalnym atakującym uzyskanie wrażliwych informacji o zadaniach. | Luki w Jenkins umożliwiają zdalnym atakującym uzyskanie wrażliwych informacji o zadaniach. |
Pilne działanie | 5,0 | 23 % | ||
| Wykonanie dowolnego skryptu w serwerze TrueConf umożliwia zdalny atak przez port 4307/TCP. | Wykonanie dowolnego skryptu w serwerze TrueConf umożliwia zdalny atak przez port 4307/TCP. |
Pilne działanie | 9,3 | 1,46 % | ||
| Atak na łańcuch dostaw w DAEMON Tools Lite umożliwia instalację złośliwego oprogramowania. | Atak na łańcuch dostaw w DAEMON Tools Lite umożliwia instalację złośliwego oprogramowania. |
Pilne działanie | 9,3 | 1,46 % | ||
| Windows MSHTML Platform Security Feature Bypass Vulnerability | Windows MSHTML Platform Security Feature Bypass Vulnerability |
Pilne działanie | 8,8 | 3,94 % | ||
| Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this… |
Pilne działanie | 8,8 | 3,93 % | ||
| Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and… | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users. |
Pilne działanie | 4,3 | 26,33 % | ||
| Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap… | Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Pilne działanie | 8,8 | 3,8 % | ||
| Wykonanie dowolnych poleceń w SMA1000 przez zdalnego uwierzytelnionego administratora. | Wykonanie dowolnych poleceń w SMA1000 przez zdalnego uwierzytelnionego administratora. |
Pilne działanie | 7,2 | 11,79 % | ||
| Błąd zapisu poza granicami w jądrze Linux może umożliwić lokalnemu użytkownikowi eskalację uprawnień. | Błąd zapisu poza granicami w jądrze Linux może umożliwić lokalnemu użytkownikowi eskalację uprawnień. |
Pilne działanie | 7,8 | 8,79 % | ||
| Obejście uwierzytelnienia w FortiOS umożliwia zdalne uzyskanie uprawnień super-admina. | Obejście uwierzytelnienia w FortiOS umożliwia zdalne uzyskanie uprawnień super-admina. |
Pilne działanie | 8,1 | 7,23 % | ||
| A memory corruption issue was addressed with improved state management. | A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that… |
Pilne działanie | 8,8 | 3,71 % | ||
| Przepełnienie bufora w win32k.sys umożliwia lokalnym użytkownikom eskalację uprawnień. | Przepełnienie bufora w win32k.sys umożliwia lokalnym użytkownikom eskalację uprawnień. |
Pilne działanie | 7,8 | 8,66 % | ||
| An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka… | An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'. |
Pilne działanie | 7,8 | 8,59 % | ||
| Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. | Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1. |
Pilne działanie | 8,1 | 7,06 % | ||
| An integer overflow was addressed with improved input validation. | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. |
Pilne działanie | 8,8 | 3,52 % | ||
| Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1. | Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1. |
Pilne działanie | 8,8 | 3,45 % | ||
| VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. | VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate… |
Pilne działanie | 7,8 | 8,44 % | ||
| Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE… | Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with… |
Pilne działanie | 8,8 | 3,35 % | ||
| JFrog Artifactory może ujawniać token anonimowego użytkownika nieautoryzowanemu wywołującemu, co naraża zasoby. | JFrog Artifactory może ujawniać token anonimowego użytkownika nieautoryzowanemu wywołującemu, co naraża zasoby. |
Pilne działanie | 7,5 | 9,81 % | ||
| The issue was addressed with improved bounds checks. | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution. |
Pilne działanie | 8,8 | 3,21 % | ||
| Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP,… | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface. |
Pilne działanie | 8,8 | 3,19 % | ||
| Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox… | Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Pilne działanie | 8,8 | 3,14 % | ||
| A buffer overflow issue was addressed with improved memory handling. | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. |
Pilne działanie | 8,8 | 3 % | ||
| . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root… | . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0. |
Pilne działanie | 8,8 | 2,99 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.