KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's…
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validation wrapper used elsewhere. Attackers…
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf NotesController::show, NotesController::update, and NotesController::destroy authorize only the generic view notes or manage…
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the…
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not…
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 1,06 % | ||
| Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information… | Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,05 % | ||
| Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a… | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 1,01 % | ||
| OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and… | OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's… |
Obserwuj | 7,7 | Nieustalone | ||
| Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to… | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,97 % | ||
| Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to… | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,97 % | ||
| Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. | Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,96 % | ||
| Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over… | Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,92 % | ||
| Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where… | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validation wrapper used elsewhere. Attackers… |
Obserwuj | 7,5 | 0,9 % | ||
| Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,88 % | ||
| InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf NotesController::show, NotesController::update, and NotesController::destroy authorize only the generic view notes or manage… |
Obserwuj | 7,6 | 0,38 % | ||
| Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. | Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. |
Obserwuj | 7,5 | 0,88 % | ||
| Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. | Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,87 % | ||
| Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. | Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,87 % | ||
| Sentry is an application monitoring and error tracking platform. | Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the… |
Obserwuj | 7,6 | 0,36 % | ||
| ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. | ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not… |
Obserwuj | 7,5 | 0,86 % | ||
| Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,85 % | ||
| Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,83 % | ||
| Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. | Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
Obserwuj | 7,5 | 0,83 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.