KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the…
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted input to the administrative Label Manager. Insufficient path validation allows traversal outside the intended directory and permits reading, modifying,…
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now…
A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The…
A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument _func results in information disclosure. The attack can be executed remotely. The exploit has been released to…
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is…
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.
A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used.
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed publicly…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,36 % | ||
| A vulnerability was determined in conductor-oss conductor up to 3.32.5. | A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the… |
Do wiadomości | 5,5 | 0,35 % | ||
| Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose… | Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,35 % | ||
| Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. | Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. |
Do wiadomości | 5,5 | 0,35 % | ||
| Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally. | Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally. |
Do wiadomości | 5,5 | 0,35 % | ||
| Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. | Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,34 % | ||
| Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. | Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,34 % | ||
| EspoCRM is an open source customer relationship management application. | EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted input to the administrative Label Manager. Insufficient path validation allows traversal outside the intended directory and permits reading, modifying,… |
Do wiadomości | 5,5 | 0,34 % | ||
| Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose… | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,34 % | ||
| A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. | A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now… |
Do wiadomości | 5,5 | 0,33 % | ||
| A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. | A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The… |
Do wiadomości | 5,5 | 0,33 % | ||
| A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. | A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument _func results in information disclosure. The attack can be executed remotely. The exploit has been released to… |
Do wiadomości | 5,5 | 0,32 % | ||
| Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,32 % | ||
| Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,32 % | ||
| Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,32 % | ||
| Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker… | Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,32 % | ||
| Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information… | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,32 % | ||
| A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. | A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is… |
Do wiadomości | 5,5 | 0,31 % | ||
| An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated… | An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log. |
Do wiadomości | 5,5 | 0,31 % | ||
| A flaw has been found in code-projects Matrimonial System 1.0. | A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used. |
Do wiadomości | 5,5 | 0,31 % | ||
| Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. | Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. | Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. | Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. | Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| A security vulnerability has been detected in SEMCMS up to 5.0. | A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed publicly… |
Do wiadomości | 5,5 | 0,31 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.