KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Luka w JD Edwards EnterpriseOne Project Costing pozwala na nieautoryzowany dostęp do danych.
Luka w Oracle Enterprise Command Center Framework pozwala na nieautoryzowany dostęp do danych.
Wstrzyknięcie LDAP w MISP umożliwia ominięcie uwierzytelnienia przez złośliwych użytkowników.
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Wykorzystanie po zwolnieniu pamięci w ANGLE w Google Chrome umożliwia zdalne wykonanie ataku.
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an…
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user…
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by…
Ucieczka z piaskownicy w komponencie graficznym umożliwia zdalne wykonanie kodu.
Błąd zapisu poza granicami w GPU w Google Chrome na Androidzie umożliwia zdalne wykonanie ucieczki z piaskownicy.
Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is not enabled (i.e. in the default configuration). NOTE: * The vendor believes that this vulnerability only occurs…
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Wstrzyknięcie poleceń w Advantech WISE-6610 umożliwia zdalne wykonanie kodu.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Luka w JD Edwards EnterpriseOne Project Costing pozwala na nieautoryzowany dostęp do danych. | Luka w JD Edwards EnterpriseOne Project Costing pozwala na nieautoryzowany dostęp do danych. |
W tym tygodniu | 9,6 | 0,34 % | ||
| Luka w Oracle Enterprise Command Center Framework pozwala na nieautoryzowany dostęp do danych. | Luka w Oracle Enterprise Command Center Framework pozwala na nieautoryzowany dostęp do danych. |
W tym tygodniu | 9,6 | 0,34 % | ||
| Wstrzyknięcie LDAP w MISP umożliwia ominięcie uwierzytelnienia przez złośliwych użytkowników. | Wstrzyknięcie LDAP w MISP umożliwia ominięcie uwierzytelnienia przez złośliwych użytkowników. |
W tym tygodniu | 9,6 | 0,34 % | ||
| Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary… | Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox… | Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via… | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the… | Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Sandbox escape in the DOM: Content Processes component. | Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
W tym tygodniu | 9,6 | 0,34 % | ||
| Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social… | Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside… | Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside… | Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code… | Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary… | Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the… | Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Wykorzystanie po zwolnieniu pamięci w ANGLE w Google Chrome umożliwia zdalne wykonanie ataku. | Wykorzystanie po zwolnieniu pamięci w ANGLE w Google Chrome umożliwia zdalne wykonanie ataku. |
W tym tygodniu | 9,6 | 0,34 % | ||
| GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12,… | GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an… |
W tym tygodniu | 9,6 | 0,34 % | ||
| ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user… |
W tym tygodniu | 9,6 | 0,33 % | ||
| ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the… | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by… |
W tym tygodniu | 9,6 | 0,33 % | ||
| Ucieczka z piaskownicy w komponencie graficznym umożliwia zdalne wykonanie kodu. | Ucieczka z piaskownicy w komponencie graficznym umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 9,6 | 0,33 % | ||
| Błąd zapisu poza granicami w GPU w Google Chrome na Androidzie umożliwia zdalne wykonanie ucieczki z piaskownicy. | Błąd zapisu poza granicami w GPU w Google Chrome na Androidzie umożliwia zdalne wykonanie ucieczki z piaskownicy. |
W tym tygodniu | 9,6 | 0,33 % | ||
| Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social… | Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,33 % | ||
| Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social… | Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,33 % | ||
| The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions… | The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is not enabled (i.e. in the default configuration). NOTE: * The vendor believes that this vulnerability only occurs… |
W tym tygodniu | 9,5 | 0,83 % | ||
| Sandbox escape in the DOM: Navigation component. | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Wstrzyknięcie poleceń w Advantech WISE-6610 umożliwia zdalne wykonanie kodu. | Wstrzyknięcie poleceń w Advantech WISE-6610 umożliwia zdalne wykonanie kodu. |
Obserwuj | 7,2 | 12,32 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.