KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of…
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012,…
Przepełnienie całkowitej liczby w wielu miejscach umożliwia lokalną eskalację uprawnień.
Błąd w przetwarzaniu UDP w Cisco IOS pozwala na zdalne wywołanie odmowy usługi.
Nieprawidłowe rozwiązywanie linków w Host Process for Windows Tasks pozwala na lokalną eskalację uprawnień.
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.
Wykorzystanie po zwolnieniu pamięci w Windows Ancillary Function Driver dla WinSock umożliwia lokalne podniesienie uprawnień przez autoryzowanego…
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.
Wykrywanie plików w Internet Explorerze umożliwia zdalnym atakującym ujawnienie informacji.
Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated…
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Luka w Internet Explorerze umożliwia zdalne wykonanie kodu.
A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Błąd w wtyczce LiteSpeed cPanel umożliwia zdalne wykonanie kodu przez symlinki.
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server…
Nieprawidłowe zarządzanie uprawnieniami w Windows Remote Desktop umożliwia lokalną eskalację uprawnień.
Błąd w Cisco IOS XR umożliwia zdalnym atakującym wywołanie awarii przez złośliwe ogłoszenie prefiksu.
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute…
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating…
Windows Error Reporting Service Elevation of Privilege Vulnerability
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. |
Pilne działanie | 8,6 | 0,84 % | ||
| A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure… | A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of… |
Pilne działanie | 8,6 | 0,82 % | ||
| An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation… | An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012,… |
Pilne działanie | 7,8 | 4,72 % | ||
| Przepełnienie całkowitej liczby w wielu miejscach umożliwia lokalną eskalację uprawnień. | Przepełnienie całkowitej liczby w wielu miejscach umożliwia lokalną eskalację uprawnień. |
Pilne działanie | 8,4 | 1,71 % | ||
| Błąd w przetwarzaniu UDP w Cisco IOS pozwala na zdalne wywołanie odmowy usługi. | Błąd w przetwarzaniu UDP w Cisco IOS pozwala na zdalne wywołanie odmowy usługi. |
Pilne działanie | 7,5 | 6,16 % | ||
| Nieprawidłowe rozwiązywanie linków w Host Process for Windows Tasks pozwala na lokalną eskalację uprawnień. | Nieprawidłowe rozwiązywanie linków w Host Process for Windows Tasks pozwala na lokalną eskalację uprawnień. |
Pilne działanie | 7,8 | 4,61 % | ||
| A memory corruption issue was addressed with improved input validation. | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges. |
Pilne działanie | 7,8 | 4,58 % | ||
| Wykorzystanie po zwolnieniu pamięci w Windows Ancillary Function Driver dla WinSock umożliwia lokalne podniesienie uprawnień przez… | Wykorzystanie po zwolnieniu pamięci w Windows Ancillary Function Driver dla WinSock umożliwia lokalne podniesienie uprawnień przez autoryzowanego… |
Pilne działanie | 7,0 | 8,57 % | ||
| An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation… | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003. |
Pilne działanie | 7,8 | 4,55 % | ||
| Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. | Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1. |
Pilne działanie | 8,1 | 3,04 % | ||
| Wykrywanie plików w Internet Explorerze umożliwia zdalnym atakującym ujawnienie informacji. | Wykrywanie plików w Internet Explorerze umożliwia zdalnym atakującym ujawnienie informacji. |
Pilne działanie | 4,3 | 22,01 % | ||
| Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same… | Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain |
Pilne działanie | 8,0 | 3,48 % | ||
| Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco… | Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated… |
Pilne działanie | 8,0 | 3,48 % | ||
| Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. |
Pilne działanie | 8,6 | 0,46 % | ||
| Luka w Internet Explorerze umożliwia zdalne wykonanie kodu. | Luka w Internet Explorerze umożliwia zdalne wykonanie kodu. |
Pilne działanie | 7,6 | 5,45 % | ||
| A validation issue was addressed with improved logic. | A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. |
Pilne działanie | 7,8 | 4,37 % | ||
| Błąd w wtyczce LiteSpeed cPanel umożliwia zdalne wykonanie kodu przez symlinki. | Błąd w wtyczce LiteSpeed cPanel umożliwia zdalne wykonanie kodu przez symlinki. |
Pilne działanie | 8,5 | 0,81 % | ||
| An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel… | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server… |
Pilne działanie | 7,8 | 4,2 % | ||
| Nieprawidłowe zarządzanie uprawnieniami w Windows Remote Desktop umożliwia lokalną eskalację uprawnień. | Nieprawidłowe zarządzanie uprawnieniami w Windows Remote Desktop umożliwia lokalną eskalację uprawnień. |
Pilne działanie | 7,8 | 4,18 % | ||
| Błąd w Cisco IOS XR umożliwia zdalnym atakującym wywołanie awarii przez złośliwe ogłoszenie prefiksu. | Błąd w Cisco IOS XR umożliwia zdalnym atakującym wywołanie awarii przez złośliwe ogłoszenie prefiksu. |
Pilne działanie | 7,5 | 5,67 % | ||
| An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803. |
Pilne działanie | 7,8 | 4,15 % | ||
| A type confusion issue was addressed with improved state handling. | A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute… |
Pilne działanie | 7,8 | 4,14 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and… | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating… |
Pilne działanie | 7,8 | 4,12 % | ||
| Windows Error Reporting Service Elevation of Privilege Vulnerability | Windows Error Reporting Service Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 4,01 % | ||
| A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). | A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the… |
Pilne działanie | 8,4 | 0,97 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.