KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Błąd w OnAuth() w jądrze Linux umożliwia odczyt poza granicami pamięci przy dekryptowaniu WEP.
Use-after-free w komponencie Audio/Video w Firefox umożliwia zdalne wykonanie kodu.
In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.
Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
Luki w skryptach instalacyjnych NVIDIA NemoClaw pozwalają na zdalne wykonanie kodu.
Wykonanie poleceń systemowych w Vimie umożliwia złośliwe wprowadzenie ścieżek przez atakującego.
Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Przepełnienie bufora w NVIDIA Cumulus Linux umożliwia zdalne wykonanie kodu.
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidp_session_thread There is a potential race condition in hidp_session_thread that may lead to use-after-free. For instance, the timer is active while hidp_del_timer is called in…
In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid_hw_stop() to prevent use-after-free A driver's probe calls hid_device_io_start() to enable input delivery, then fails at a later initialization step and unwinds via hid_hw_stop(). The unwind frees…
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete A use-after-free issue occurs in mt76_rx_poll_complete due to a race condition. The STA has already been removed, but the rx_status still had a pointer to the wcid…
IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check. A malicious actor can use the elevated privileges of another user profile to gain root access to the host operating system.
Podatność w Hermes Agent umożliwia zdalne wstrzykiwanie poleceń przez DNS rebinding.
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or…
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by…
Wstrzyknięcie poleceń w interfejsie transferu plików umożliwia zdalne wykonanie kodu.
Brak autoryzacji w Cvlaunchd umożliwia nieautoryzowane wykonanie poleceń.
Błąd w Pterodactyl Panel umożliwia subużytkownikom wykonywanie dowolnych poleceń konsoli.
Wstrzyknięcie SQL w DreamMaker umożliwia zdalnym atakującym manipulację danymi w bazie.
Nieprawidłowe ujawnienie zasobów w CacheStorage w Google Chrome umożliwia zdalne wykonanie kodu.
Błąd use after free w Skia w Google Chrome umożliwia zdalne wykonanie kodu w piaskownicy.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Błąd w OnAuth() w jądrze Linux umożliwia odczyt poza granicami pamięci przy dekryptowaniu WEP. | Błąd w OnAuth() w jądrze Linux umożliwia odczyt poza granicami pamięci przy dekryptowaniu WEP. |
Obserwuj | 8,8 | 0,32 % | ||
| Use-after-free w komponencie Audio/Video w Firefox umożliwia zdalne wykonanie kodu. | Use-after-free w komponencie Audio/Video w Firefox umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,32 % | ||
| In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would… | In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case. |
Obserwuj | 8,8 | 0,32 % | ||
| Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions. | Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions. |
Obserwuj | 8,8 | 0,32 % | ||
| Luki w skryptach instalacyjnych NVIDIA NemoClaw pozwalają na zdalne wykonanie kodu. | Luki w skryptach instalacyjnych NVIDIA NemoClaw pozwalają na zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,32 % | ||
| Wykonanie poleceń systemowych w Vimie umożliwia złośliwe wprowadzenie ścieżek przez atakującego. | Wykonanie poleceń systemowych w Vimie umożliwia złośliwe wprowadzenie ścieżek przez atakującego. |
Obserwuj | 8,8 | 0,31 % | ||
| Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via… | Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
Obserwuj | 8,8 | 0,31 % | ||
| Przepełnienie bufora w NVIDIA Cumulus Linux umożliwia zdalne wykonanie kodu. | Przepełnienie bufora w NVIDIA Cumulus Linux umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,31 % | ||
| In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidp_session_thread There is a… | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidp_session_thread There is a potential race condition in hidp_session_thread that may lead to use-after-free. For instance, the timer is active while hidp_del_timer is called in… |
Obserwuj | 8,8 | 0,31 % | ||
| In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid_hw_stop() to prevent… | In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid_hw_stop() to prevent use-after-free A driver's probe calls hid_device_io_start() to enable input delivery, then fails at a later initialization step and unwinds via hid_hw_stop(). The unwind frees… |
Obserwuj | 8,8 | 0,31 % | ||
| In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete A… | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete A use-after-free issue occurs in mt76_rx_poll_complete due to a race condition. The STA has already been removed, but the rx_status still had a pointer to the wcid… |
Obserwuj | 8,8 | 0,31 % | ||
| IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check. | IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check. A malicious actor can use the elevated privileges of another user profile to gain root access to the host operating system. |
Obserwuj | 8,8 | 0,31 % | ||
| Podatność w Hermes Agent umożliwia zdalne wstrzykiwanie poleceń przez DNS rebinding. | Podatność w Hermes Agent umożliwia zdalne wstrzykiwanie poleceń przez DNS rebinding. |
Obserwuj | 8,7 | 0,81 % | ||
| A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system. | A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system. |
Obserwuj | 8,6 | 1,31 % | ||
| An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings,… | An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or… |
Obserwuj | 8,8 | 0,31 % | ||
| Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. |
Obserwuj | 8,8 | 0,31 % | ||
| Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to… | Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,31 % | ||
| Use-after-free in the JavaScript: WebAssembly component. | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
Obserwuj | 8,8 | 0,31 % | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security… | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
Obserwuj | 8,8 | 0,31 % | ||
| Wstrzyknięcie poleceń w interfejsie transferu plików umożliwia zdalne wykonanie kodu. | Wstrzyknięcie poleceń w interfejsie transferu plików umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,31 % | ||
| Brak autoryzacji w Cvlaunchd umożliwia nieautoryzowane wykonanie poleceń. | Brak autoryzacji w Cvlaunchd umożliwia nieautoryzowane wykonanie poleceń. |
Obserwuj | 8,8 | 0,31 % | ||
| Błąd w Pterodactyl Panel umożliwia subużytkownikom wykonywanie dowolnych poleceń konsoli. | Błąd w Pterodactyl Panel umożliwia subużytkownikom wykonywanie dowolnych poleceń konsoli. |
Obserwuj | 8,8 | 0,31 % | ||
| Wstrzyknięcie SQL w DreamMaker umożliwia zdalnym atakującym manipulację danymi w bazie. | Wstrzyknięcie SQL w DreamMaker umożliwia zdalnym atakującym manipulację danymi w bazie. |
Obserwuj | 8,8 | 0,31 % | ||
| Nieprawidłowe ujawnienie zasobów w CacheStorage w Google Chrome umożliwia zdalne wykonanie kodu. | Nieprawidłowe ujawnienie zasobów w CacheStorage w Google Chrome umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,31 % | ||
| Błąd use after free w Skia w Google Chrome umożliwia zdalne wykonanie kodu w piaskownicy. | Błąd use after free w Skia w Google Chrome umożliwia zdalne wykonanie kodu w piaskownicy. |
Obserwuj | 8,8 | 0,31 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.