KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users' skills via DELETE /api/cli/v1/skills/{namespace}/{slug}. Attackers can locate targets through the anonymous search endpoint and trigger deletion…
Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the…
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenants' devices by supplying sequential device IDs. Self-registered attackers can enumerate deviceId or serialNumber values…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a… | Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. | Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. | Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. | Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. | Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized… | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete… | iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users' skills via DELETE /api/cli/v1/skills/{namespace}/{slug}. Attackers can locate targets through the anonymous search endpoint and trigger deletion… |
Obserwuj | 8,1 | Nieustalone | ||
| Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because… | Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the… |
Obserwuj | 8,1 | Nieustalone | ||
| Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. | Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network. | Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over… | Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,1 | Nieustalone | ||
| FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated… | FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenants' devices by supplying sequential device IDs. Self-registered attackers can enumerate deviceId or serialNumber values… |
Obserwuj | 8,1 | Nieustalone |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.