KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction.…
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipulate other users' pages because page management and OCR endpoints skip has_node_perm checks. Attackers knowing page UUIDs can call /pages/, /pages/move, or /pages/extract to…
Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership checks. Attackers who obtain identifiers, for example from shared project links,…
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf NotesController::show, NotesController::update, and NotesController::destroy authorize only the generic view notes or manage…
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. | Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,1 % | ||
| ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction.… |
Obserwuj | 7,6 | 0,59 % | ||
| Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to… | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information… | Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,05 % | ||
| Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a… | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipulate other users'… | Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipulate other users' pages because page management and OCR endpoints skip has_node_perm checks. Attackers knowing page UUIDs can call /pages/, /pages/move, or /pages/extract to… |
Obserwuj | 7,7 | Nieustalone | ||
| Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying… | Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership checks. Attackers who obtain identifiers, for example from shared project links,… |
Obserwuj | 7,7 | Nieustalone | ||
| Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to… | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,97 % | ||
| Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to… | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,97 % | ||
| Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,96 % | ||
| Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over… | Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,92 % | ||
| Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. | Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,89 % | ||
| Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,88 % | ||
| InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf NotesController::show, NotesController::update, and NotesController::destroy authorize only the generic view notes or manage… |
Obserwuj | 7,6 | 0,38 % | ||
| Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. | Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,88 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.