KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require…
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.
yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attackers to crash the server. Attackers can send a single request with a url value like --version, causing invalid yt-dlp JSON output and an…
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause a denial of service when multiple UPDATEs occur over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured.
An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service via EVPN BGP route processing. The issue affects EVPN-enabled routing…
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sending oversized POST bodies. Attackers can send arbitrarily large or many concurrent POST requests, read fully via io.ReadAll before…
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execution in all versions up to, and including, 2.10.6 The vulnerability exists because `IntegrationHandler::executeWithCapture()`…
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve personally…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,57 % | ||
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,57 % | ||
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,57 % | ||
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,57 % | ||
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,57 % | ||
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,57 % | ||
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,57 % | ||
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,57 % | ||
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,57 % | ||
| CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application… | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require… |
Obserwuj | 7,5 | 0,57 % | ||
| A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending… | A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. |
Obserwuj | 7,5 | 0,57 % | ||
| yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote… | yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attackers to crash the server. Attackers can send a single request with a url value like --version, causing invalid yt-dlp JSON output and an… |
Obserwuj | 7,5 | 0,56 % | ||
| Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
Obserwuj | 7,5 | 0,56 % | ||
| A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a… | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause a denial of service when multiple UPDATEs occur over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured. |
Obserwuj | 7,5 | 0,55 % | ||
| An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote… | An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service via EVPN BGP route processing. The issue affects EVPN-enabled routing… |
Obserwuj | 7,5 | 0,55 % | ||
| Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,55 % | ||
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,55 % | ||
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,55 % | ||
| Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,55 % | ||
| mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated… | mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sending oversized POST bodies. Attackers can send arbitrarily large or many concurrent POST requests, read fully via io.ReadAll before… |
Obserwuj | 7,5 | 0,55 % | ||
| Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
Obserwuj | 7,5 | 0,54 % | ||
| An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP… | An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service |
Obserwuj | 7,5 | 0,54 % | ||
| The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to… | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execution in all versions up to, and including, 2.10.6 The vulnerability exists because `IntegrationHandler::executeWithCapture()`… |
Obserwuj | 7,5 | 0,54 % | ||
| Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
Obserwuj | 7,5 | 0,54 % | ||
| The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to… | The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve personally… |
Obserwuj | 7,5 | 0,53 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.