Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing.…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and promoted GET parameters of admin/modules/bibliography/index.php, because escape_string() is applied but the values are concatenated into an unquoted numeric…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit.…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
CVSS
8,8
EPSS
0,45 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and promoted GET parameters of admin/modules/bibliography/index.php, because escape_string() is applied but the values are concatenated into an unquoted numeric…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
8,8
0,45 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.