KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Wyścig w obsłudze ICReq w jądrze Linuxa pozwala na nieprawidłowe zarządzanie stanem kolejki.
Obejście uwierzytelnienia w Nuvation Energy Multi-Stack Controller umożliwia dostęp bez hasła.
Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.
Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.
Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.
Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.
Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.
Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.
Unauthenticated PHP Object Injection in Mission <= 1.22 versions.
IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of…
Nieprawidłowa walidacja tokenów OAuth w IdentityIQ umożliwia nieautoryzowany dostęp do danych.
The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4. This is due to the plugin allowing users who are registering new accounts to set their own role or by supplying 'user_type' field. This makes it possible for unauthenticated…
Słaba walidacja kryptograficzna w IBM Security Verify Access umożliwia atak na dane użytkowników.
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows Object Injection. This issue affects Block AJAX versions: from 0.0.0 to 3.0.2.
Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which…
GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter.
Eskalacja uprawnień w IBM Db2 umożliwia wykonanie specjalnie przygotowanego zapytania.
Wstrzyknięcie SQL w Fruits Bazar umożliwia nieautoryzowany dostęp do danych.
Brak sanitizacji w math-codegen umożliwia zdalne wykonanie kodu przez wstrzyknięcie poleceń.
Manipulacja stanem wymiany kluczy w wolfSSH może prowadzić do ujawnienia hasła klienta.
HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL `DSL` by calling `keyword` or `symbol` on that input can produce SQL strings that facilitate SQL injection when executed unchanged by a `JDBC`…
An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation.
Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by…
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Wyścig w obsłudze ICReq w jądrze Linuxa pozwala na nieprawidłowe zarządzanie stanem kolejki. | Wyścig w obsłudze ICReq w jądrze Linuxa pozwala na nieprawidłowe zarządzanie stanem kolejki. |
W tym tygodniu | 9,8 | 0,4 % | ||
| Obejście uwierzytelnienia w Nuvation Energy Multi-Stack Controller umożliwia dostęp bez hasła. | Obejście uwierzytelnienia w Nuvation Energy Multi-Stack Controller umożliwia dostęp bez hasła. |
W tym tygodniu | 9,8 | 0,4 % | ||
| Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. | Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. |
W tym tygodniu | 9,8 | 0,4 % | ||
| Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. | Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. |
W tym tygodniu | 9,8 | 0,4 % | ||
| Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. | Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. |
W tym tygodniu | 9,8 | 0,4 % | ||
| Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. | Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. |
W tym tygodniu | 9,8 | 0,4 % | ||
| Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. | Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. |
W tym tygodniu | 9,8 | 0,4 % | ||
| Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. | Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. |
W tym tygodniu | 9,8 | 0,4 % | ||
| Unauthenticated PHP Object Injection in Mission <= 1.22 versions. | Unauthenticated PHP Object Injection in Mission <= 1.22 versions. |
W tym tygodniu | 9,8 | 0,4 % | ||
| IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly… | IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of… |
W tym tygodniu | 9,8 | 0,4 % | ||
| Nieprawidłowa walidacja tokenów OAuth w IdentityIQ umożliwia nieautoryzowany dostęp do danych. | Nieprawidłowa walidacja tokenów OAuth w IdentityIQ umożliwia nieautoryzowany dostęp do danych. |
W tym tygodniu | 9,8 | 0,4 % | ||
| The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4. | The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4. This is due to the plugin allowing users who are registering new accounts to set their own role or by supplying 'user_type' field. This makes it possible for unauthenticated… |
W tym tygodniu | 9,8 | 0,4 % | ||
| Słaba walidacja kryptograficzna w IBM Security Verify Access umożliwia atak na dane użytkowników. | Słaba walidacja kryptograficzna w IBM Security Verify Access umożliwia atak na dane użytkowników. |
W tym tygodniu | 9,8 | 0,4 % | ||
| Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows Object Injection. | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows Object Injection. This issue affects Block AJAX versions: from 0.0.0 to 3.0.2. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Plane is an open-source project management tool. | Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which… |
W tym tygodniu | 9,8 | 0,39 % | ||
| GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter. | GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Eskalacja uprawnień w IBM Db2 umożliwia wykonanie specjalnie przygotowanego zapytania. | Eskalacja uprawnień w IBM Db2 umożliwia wykonanie specjalnie przygotowanego zapytania. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w Fruits Bazar umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w Fruits Bazar umożliwia nieautoryzowany dostęp do danych. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Brak sanitizacji w math-codegen umożliwia zdalne wykonanie kodu przez wstrzyknięcie poleceń. | Brak sanitizacji w math-codegen umożliwia zdalne wykonanie kodu przez wstrzyknięcie poleceń. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Manipulacja stanem wymiany kluczy w wolfSSH może prowadzić do ujawnienia hasła klienta. | Manipulacja stanem wymiany kluczy w wolfSSH może prowadzić do ujawnienia hasła klienta. |
W tym tygodniu | 9,8 | 0,39 % | ||
| HoneySQL turns Clojure data structures into SQL. | HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL `DSL` by calling `keyword` or `symbol` on that input can produce SQL strings that facilitate SQL injection when executed unchanged by a `JDBC`… |
W tym tygodniu | 9,8 | 0,39 % | ||
| An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. | An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This… | Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7. |
W tym tygodniu | 9,8 | 0,39 % | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security… | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
W tym tygodniu | 9,8 | 0,39 % | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security… | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
W tym tygodniu | 9,8 | 0,39 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.