KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, accumulates them into an Int, and primitive readers allocate arrays without checking the declared size against the…
Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The…
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. | ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, accumulates them into an Int, and primitive readers allocate arrays without checking the declared size against the… |
Do wiadomości | 6,7 | 0,13 % | ||
| Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the… | Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method. |
Do wiadomości | 6,5 | 1,12 % | ||
| Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The… |
Do wiadomości | 6,7 | 0,11 % | ||
| Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized… | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a… | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network. | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network. | Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network. | Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
Do wiadomości | 6,5 | 1,09 % | ||
| Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized… | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 1,05 % | ||
| Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network. | Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,99 % | ||
| Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network. | Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,99 % | ||
| Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,96 % | ||
| Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. | Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,95 % | ||
| Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,95 % | ||
| Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,95 % | ||
| Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network. | Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,95 % | ||
| Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a… | Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,95 % | ||
| Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
Do wiadomości | 6,5 | 0,95 % | ||
| Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network. | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,95 % | ||
| Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
Do wiadomości | 6,5 | 0,95 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.