KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted input to the administrative Label Manager. Insufficient path validation allows traversal outside the intended directory and permits reading, modifying,…
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now…
A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The…
A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument _func results in information disclosure. The attack can be executed remotely. The exploit has been released to…
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is…
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.
A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used.
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed publicly…
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be…
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| EspoCRM is an open source customer relationship management application. | EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted input to the administrative Label Manager. Insufficient path validation allows traversal outside the intended directory and permits reading, modifying,… |
Do wiadomości | 5,5 | 0,34 % | ||
| Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose… | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,34 % | ||
| A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. | A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now… |
Do wiadomości | 5,5 | 0,33 % | ||
| A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. | A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The… |
Do wiadomości | 5,5 | 0,33 % | ||
| A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. | A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument _func results in information disclosure. The attack can be executed remotely. The exploit has been released to… |
Do wiadomości | 5,5 | 0,32 % | ||
| Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,32 % | ||
| Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,32 % | ||
| Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,32 % | ||
| Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker… | Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,32 % | ||
| Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information… | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,32 % | ||
| A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. | A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is… |
Do wiadomości | 5,5 | 0,31 % | ||
| An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated… | An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log. |
Do wiadomości | 5,5 | 0,31 % | ||
| A flaw has been found in code-projects Matrimonial System 1.0. | A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used. |
Do wiadomości | 5,5 | 0,31 % | ||
| Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. | Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. | Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. | Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. | Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| A security vulnerability has been detected in SEMCMS up to 5.0. | A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed publicly… |
Do wiadomości | 5,5 | 0,31 % | ||
| Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to… | Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,31 % | ||
| Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally. | Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally. |
Do wiadomości | 5,5 | 0,3 % | ||
| A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. | A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be… |
Do wiadomości | 5,5 | 0,3 % | ||
| Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,3 % | ||
| Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. | Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,3 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.