KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.3.2. This is due to missing authorization and nonce validation in the eco_save_settings() function, which…
An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR #15 (< 2026-01-17). The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do…
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function. The vulnerability is caused by insufficient filtering before the filename field is concatenated into a command. A remote attacker can trigger this vulnerability via crafted input to execute…
Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient filtering before the restorekey field is concatenated into a shell command. A remote attacker can trigger this vulnerability via crafted input…
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerability is caused by incomplete filtering of dangerous characters such as backticks, newline characters, and single quotes in the parameter field. A remote attacker can trigger…
Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the event_code field is concatenated into a system command. A remote attacker can trigger this…
Atak czasowy w Misskey umożliwia akceptację nieprawdziwych informacji, co prowadzi do utraty integralności.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,79 % | ||
| The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary… | The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.3.2. This is due to missing authorization and nonce validation in the eco_save_settings() function, which… |
Obserwuj | 8,8 | 0,79 % | ||
| An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR #15 (< 2026-01-17). | An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR #15 (< 2026-01-17). The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter |
Obserwuj | 8,8 | 0,78 % | ||
| GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting… | GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do… |
Obserwuj | 8,7 | 1,28 % | ||
| Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function. | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function. The vulnerability is caused by insufficient filtering before the filename field is concatenated into a command. A remote attacker can trigger this vulnerability via crafted input to execute… |
Obserwuj | 8,6 | 1,78 % | ||
| Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. | Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient filtering before the restorekey field is concatenated into a shell command. A remote attacker can trigger this vulnerability via crafted input… |
Obserwuj | 8,6 | 1,78 % | ||
| Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerability is caused by incomplete filtering of dangerous characters such as backticks, newline characters, and single quotes in the parameter field. A remote attacker can trigger… |
Obserwuj | 8,6 | 1,78 % | ||
| Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. | Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the event_code field is concatenated into a system command. A remote attacker can trigger this… |
Obserwuj | 8,6 | 1,78 % | ||
| Atak czasowy w Misskey umożliwia akceptację nieprawdziwych informacji, co prowadzi do utraty integralności. | Atak czasowy w Misskey umożliwia akceptację nieprawdziwych informacji, co prowadzi do utraty integralności. |
Obserwuj | 8,9 | 0,28 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. | Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % | ||
| Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
Obserwuj | 8,8 | 0,78 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.