KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ....//file that become ../file, creating or overwriting…
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via sending a crafted packet to the eventd relay service.
A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a network message.
Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a symlink or NTFS junction at a virtual ancestor directory,…
Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback resolver in js.Build, js.Batch, and css.Build. Attackers can ship relative imports or symlinks pointing outside the…
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, accumulates them into an Int, and primitive readers allocate arrays without checking the declared size against the…
Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The…
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. |
Do wiadomości | 6,7 | 0,33 % | ||
| Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
Do wiadomości | 6,7 | 0,33 % | ||
| MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by… | MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ....//file that become ../file, creating or overwriting… |
Do wiadomości | 6,7 | 0,29 % | ||
| Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
Do wiadomości | 6,7 | 0,26 % | ||
| Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
Do wiadomości | 6,7 | 0,26 % | ||
| Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
Do wiadomości | 6,7 | 0,24 % | ||
| An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial… | An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via sending a crafted packet to the eventd relay service. |
Do wiadomości | 6,7 | 0,16 % | ||
| A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an… | A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a network message. |
Do wiadomości | 6,7 | 0,16 % | ||
| Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network. | Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network. |
Do wiadomości | 6,6 | 0,65 % | ||
| Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files… | Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a symlink or NTFS junction at a virtual ancestor directory,… |
Do wiadomości | 6,7 | 0,14 % | ||
| Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside… | Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback resolver in js.Build, js.Batch, and css.Build. Attackers can ship relative imports or symlinks pointing outside the… |
Do wiadomości | 6,7 | 0,14 % | ||
| Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to… | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock. |
Do wiadomości | 6,7 | 0,14 % | ||
| Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network. | Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,14 % | ||
| Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network. | Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,14 % | ||
| Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network. | Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network. |
Do wiadomości | 6,5 | 1,14 % | ||
| Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network. | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 1,13 % | ||
| ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. | ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, accumulates them into an Int, and primitive readers allocate arrays without checking the declared size against the… |
Do wiadomości | 6,7 | 0,13 % | ||
| Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the… | Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method. |
Do wiadomości | 6,5 | 1,12 % | ||
| Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The… |
Do wiadomości | 6,7 | 0,11 % | ||
| Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized… | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a… | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.