KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Wykonanie dowolnych poleceń w OpenChoreo umożliwia wstrzyknięcie parametrów do skryptów.
Deserializacja w EAP's Artemis pozwala na deserializację wszystkich klas domyślnie.
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials. This vulnerability,…
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The…
A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check before canonicalizing dot segments. Under the supported non-default…
Odbicie XSS w Combodo iTop umożliwia atakującemu wykonanie złośliwego skryptu.
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Przepełnienie bufora w SQL Server umożliwia autoryzowanemu atakującemu zdalne wykonanie kodu.
Przepełnienie całkowite w usłudze Windows Work Folder umożliwia zdalne wykonanie kodu.
Przepełnienie bufora w Windows Credential Providers umożliwia zdalne wykonanie kodu przez uprawnionego atakującego.
Atak SSRF w Microsoft Exchange Server pozwala autoryzowanemu napastnikowi na eskalację uprawnień w sieci.
Wykorzystanie podatności SSRF w @pdfme/common pozwala na nieautoryzowane żądania do wewnętrznych punktów.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Wykonanie dowolnych poleceń w OpenChoreo umożliwia wstrzyknięcie parametrów do skryptów. | Wykonanie dowolnych poleceń w OpenChoreo umożliwia wstrzyknięcie parametrów do skryptów. |
Obserwuj | 8,8 | 0,86 % | ||
| Deserializacja w EAP's Artemis pozwala na deserializację wszystkich klas domyślnie. | Deserializacja w EAP's Artemis pozwala na deserializację wszystkich klas domyślnie. |
Obserwuj | 8,8 | 0,86 % | ||
| The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that… | The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials. This vulnerability,… |
Obserwuj | 8,9 | 0,36 % | ||
| A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. | A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The… |
Obserwuj | 8,8 | 0,85 % | ||
| A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. | A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. |
Obserwuj | 8,8 | 0,85 % | ||
| Lychee is a free, open-source photo-management tool. | Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check before canonicalizing dot segments. Under the supported non-default… |
Obserwuj | 8,9 | 0,35 % | ||
| Odbicie XSS w Combodo iTop umożliwia atakującemu wykonanie złośliwego skryptu. | Odbicie XSS w Combodo iTop umożliwia atakującemu wykonanie złośliwego skryptu. |
Obserwuj | 8,9 | 0,35 % | ||
| Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,85 % | ||
| Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network. | Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,85 % | ||
| Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,85 % | ||
| Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,85 % | ||
| Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
Obserwuj | 8,8 | 0,85 % | ||
| Przepełnienie bufora w SQL Server umożliwia autoryzowanemu atakującemu zdalne wykonanie kodu. | Przepełnienie bufora w SQL Server umożliwia autoryzowanemu atakującemu zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,85 % | ||
| Przepełnienie całkowite w usłudze Windows Work Folder umożliwia zdalne wykonanie kodu. | Przepełnienie całkowite w usłudze Windows Work Folder umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,85 % | ||
| Przepełnienie bufora w Windows Credential Providers umożliwia zdalne wykonanie kodu przez uprawnionego atakującego. | Przepełnienie bufora w Windows Credential Providers umożliwia zdalne wykonanie kodu przez uprawnionego atakującego. |
Obserwuj | 8,8 | 0,85 % | ||
| Atak SSRF w Microsoft Exchange Server pozwala autoryzowanemu napastnikowi na eskalację uprawnień w sieci. | Atak SSRF w Microsoft Exchange Server pozwala autoryzowanemu napastnikowi na eskalację uprawnień w sieci. |
Obserwuj | 8,8 | 0,85 % | ||
| Wykorzystanie podatności SSRF w @pdfme/common pozwala na nieautoryzowane żądania do wewnętrznych punktów. | Wykorzystanie podatności SSRF w @pdfme/common pozwala na nieautoryzowane żądania do wewnętrznych punktów. |
Obserwuj | 8,9 | 0,35 % | ||
| Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,84 % | ||
| Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
Obserwuj | 8,8 | 0,84 % | ||
| Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,84 % | ||
| Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,84 % | ||
| Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,84 % | ||
| Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,84 % | ||
| Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,84 % | ||
| Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. | Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,84 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.