KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.
A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been…
A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be…
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to…
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.
A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/netflix/conductor/contribs/tasks/kafka/KafkaPublishTask.java. The manipulation of the argument kafka_request.bootStrapServers…
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to… | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,49 % | ||
| Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,49 % | ||
| Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to… | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,49 % | ||
| Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to… | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,49 % | ||
| Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose… | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,49 % | ||
| Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose… | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,49 % | ||
| Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker… | Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,49 % | ||
| Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose… | Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,49 % | ||
| Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information… | Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,49 % | ||
| A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. | A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been… |
Do wiadomości | 5,5 | 0,48 % | ||
| A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. | A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be… |
Do wiadomości | 5,5 | 0,47 % | ||
| Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose… | Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,47 % | ||
| Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information… | Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,47 % | ||
| Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. | Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,47 % | ||
| Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose… | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,47 % | ||
| A vulnerability has been found in Ollama up to 0.34.1. | A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to… |
Do wiadomości | 5,5 | 0,47 % | ||
| Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker… | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,46 % | ||
| Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to… | Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,46 % | ||
| Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to… | Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,46 % | ||
| A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. | A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/netflix/conductor/contribs/tasks/kafka/KafkaPublishTask.java. The manipulation of the argument kafka_request.bootStrapServers… |
Do wiadomości | 5,5 | 0,45 % | ||
| Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to… | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,45 % | ||
| Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. | Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,45 % | ||
| Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose… | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,45 % | ||
| Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information… | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,43 % | ||
| Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to… | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,43 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.