Podatności

Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCategoryFilter parameter, which is persisted into the session and later concatenated into a SQL statement without parameterization.…

CVSS 8,1 · rekomendacja wg zapisanej polityki

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right records for a caller-supplied target space without verifying the caller has rights to that space. Attackers can assign access…

CVSS 8,1 · rekomendacja wg zapisanej polityki

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the…

CVSS 8,1 · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVSS 8,1 · rekomendacja wg zapisanej polityki