Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu.
Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu.
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
KATALOG INFORMACJI
Podatności
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Filtry katalogu · zakres, producent, rekomendacja
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Typowe pomylenie w PostgreSQL pg_restore_attribute_stats() umożliwia wykonanie dowolnego kodu przez twórcę obiektu.
Typowe pomylenie w PostgreSQL pg_restore_attribute_stats() umożliwia wykonanie dowolnego kodu przez twórcę obiektu.
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Błąd w kernelu Linux pozwalał na nieprawidłowe przetwarzanie ACE, co mogło prowadzić do naruszenia integralności DACL.
Błąd w kernelu Linux pozwalał na nieprawidłowe przetwarzanie ACE, co mogło prowadzić do naruszenia integralności DACL.
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Błąd use after free w Safe Browsing w Google Chrome umożliwia zdalnemu atakującemu dostęp do pamięci.
Błąd use after free w Safe Browsing w Google Chrome umożliwia zdalnemu atakującemu dostęp do pamięci.
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Wstrzyknięcie poleceń w Ruijie AP180 umożliwia zdalne wykonanie dowolnych poleceń systemowych.
Wstrzyknięcie poleceń w Ruijie AP180 umożliwia zdalne wykonanie dowolnych poleceń systemowych.
- CVSS
- 8,6
- EPSS
- 1,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…
Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox…
Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the…
Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability.
Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
RabbitMQ is a messaging and streaming broker.
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, match_origin/1 returned the bare reflected Origin and allowed credentials even when the wildcard "" was configured, so the response echoed the attacker's origin together with…
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox…
Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the…
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox…
Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox…
Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code…
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary…
Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary…
Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social…
Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the…
Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code…
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- CVSS
- 8,8
- EPSS
- 0,41 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu. | Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,41 % | ||
| IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. |
Obserwuj | 8,8 | 0,41 % | ||
| Typowe pomylenie w PostgreSQL pg_restore_attribute_stats() umożliwia wykonanie dowolnego kodu przez twórcę obiektu. | Typowe pomylenie w PostgreSQL pg_restore_attribute_stats() umożliwia wykonanie dowolnego kodu przez twórcę obiektu. |
Obserwuj | 8,8 | 0,41 % | ||
| Błąd w kernelu Linux pozwalał na nieprawidłowe przetwarzanie ACE, co mogło prowadzić do naruszenia integralności DACL. | Błąd w kernelu Linux pozwalał na nieprawidłowe przetwarzanie ACE, co mogło prowadzić do naruszenia integralności DACL. |
Obserwuj | 8,8 | 0,41 % | ||
| Błąd use after free w Safe Browsing w Google Chrome umożliwia zdalnemu atakującemu dostęp do pamięci. | Błąd use after free w Safe Browsing w Google Chrome umożliwia zdalnemu atakującemu dostęp do pamięci. |
Obserwuj | 8,8 | 0,41 % | ||
| Wstrzyknięcie poleceń w Ruijie AP180 umożliwia zdalne wykonanie dowolnych poleceń systemowych. | Wstrzyknięcie poleceń w Ruijie AP180 umożliwia zdalne wykonanie dowolnych poleceń systemowych. |
Obserwuj | 8,6 | 1,41 % | ||
| Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,41 % | ||
| Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside… | Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox… | Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the… | Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. | Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution. |
Obserwuj | 8,8 | 0,41 % | ||
| RabbitMQ is a messaging and streaming broker. | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, match_origin/1 returned the bare reflected Origin and allowed credentials even when the wildcard "" was configured, so the response echoed the attacker's origin together with… |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox… | Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the… | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox… | Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox… | Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,41 % | ||
| Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code… | Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary… | Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary… | Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,41 % | ||
| Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social… | Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the… | Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code… | Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,41 % | ||
| Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,41 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.