KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validation wrapper used elsewhere. Attackers…
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf NotesController::show, NotesController::update, and NotesController::destroy authorize only the generic view notes or manage…
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the…
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not…
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal…
Subscriber Settings Change in uListing <= 2.2.0 versions.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information… | Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,05 % | ||
| Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a… | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to… | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,97 % | ||
| Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to… | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,97 % | ||
| Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,96 % | ||
| Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over… | Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,92 % | ||
| Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where… | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validation wrapper used elsewhere. Attackers… |
Obserwuj | 7,5 | 0,9 % | ||
| Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,88 % | ||
| InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf NotesController::show, NotesController::update, and NotesController::destroy authorize only the generic view notes or manage… |
Obserwuj | 7,6 | 0,38 % | ||
| Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. | Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,88 % | ||
| Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. | Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,87 % | ||
| Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. | Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,87 % | ||
| Sentry is an application monitoring and error tracking platform. | Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the… |
Obserwuj | 7,6 | 0,36 % | ||
| ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. | ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not… |
Obserwuj | 7,5 | 0,86 % | ||
| Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,85 % | ||
| Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,83 % | ||
| Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. | Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,83 % | ||
| IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an… | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw. |
Obserwuj | 7,6 | 0,33 % | ||
| Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user… | Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal… |
Obserwuj | 7,6 | 0,32 % | ||
| Subscriber Settings Change in uListing <= 2.2.0 versions. | Subscriber Settings Change in uListing <= 2.2.0 versions. |
Obserwuj | 7,6 | 0,3 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.