KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Przepełnienie bufora w komponentach POSIX systemów Windows NT i 2000 umożliwia lokalne wykonanie kodu.
A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.
Wykorzystanie luki w jądrze Windows umożliwia eskalację uprawnień.
Windows Mark of the Web Security Feature Bypass Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
Wstrzyknięcie kodu w Microsoft Office SharePoint umożliwia autoryzowanemu atakującemu oszustwo w sieci.
A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may…
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on…
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete…
Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access.
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…
Atak na Trivy umożliwia publikację złośliwych wersji i kradzież danych uwierzytelniających.
Korupcja pamięci w Safari może prowadzić do zdalnego wykonania kodu przez przetwarzanie złośliwie przygotowanych treści internetowych.
Wykonanie złośliwego kodu w WebKit przez przetwarzanie złośliwych treści internetowych.
A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (virtual) and CN-Series (container)…
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use…
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware…
W Adobe Flash Player i AIR występuje błąd umożliwiający zdalne wykonanie kodu lub DoS.
Podatność w Windows Installer umożliwia eskalację uprawnień.
Błąd zapisu poza granicami w systemach Apple może prowadzić do zdalnego wykonania kodu.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Przepełnienie bufora w komponentach POSIX systemów Windows NT i 2000 umożliwia lokalne wykonanie kodu. | Przepełnienie bufora w komponentach POSIX systemów Windows NT i 2000 umożliwia lokalne wykonanie kodu. |
Pilne działanie | 7,8 | 7,21 % | ||
| A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0… | A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands. |
Pilne działanie | 7,1 | 10,68 % | ||
| Wykorzystanie luki w jądrze Windows umożliwia eskalację uprawnień. | Wykorzystanie luki w jądrze Windows umożliwia eskalację uprawnień. |
Pilne działanie | 7,2 | 10,17 % | ||
| Windows Mark of the Web Security Feature Bypass Vulnerability | Windows Mark of the Web Security Feature Bypass Vulnerability |
Pilne działanie | 6,5 | 13,63 % | ||
| Windows Hyper-V Elevation of Privilege Vulnerability | Windows Hyper-V Elevation of Privilege Vulnerability |
Pilne działanie | 7,8 | 7,12 % | ||
| Wstrzyknięcie kodu w Microsoft Office SharePoint umożliwia autoryzowanemu atakującemu oszustwo w sieci. | Wstrzyknięcie kodu w Microsoft Office SharePoint umożliwia autoryzowanemu atakującemu oszustwo w sieci. |
Pilne działanie | 8,8 | 2,1 % | ||
| A permissions issue was addressed with improved validation. | A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited.. |
Pilne działanie | 7,8 | 7,04 % | ||
| PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may… |
Pilne działanie | 9,2 | Nieustalone | ||
| PHP has various global state that temporarily points into request memory. | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on… |
Pilne działanie | 9,2 | Nieustalone | ||
| An integer overflow was addressed with improved input validation. | An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution. |
Pilne działanie | 7,8 | 6,96 % | ||
| An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete… |
Pilne działanie | 7,8 | 6,89 % | ||
| Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. | Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access. |
Pilne działanie | 8,8 | 1,87 % | ||
| The vCenter Server contains an information disclosure vulnerability due to improper permission of files. | The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information. |
Pilne działanie | 6,5 | 13,28 % | ||
| Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an… | Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction… |
Pilne działanie | 7,8 | 6,75 % | ||
| Atak na Trivy umożliwia publikację złośliwych wersji i kradzież danych uwierzytelniających. | Atak na Trivy umożliwia publikację złośliwych wersji i kradzież danych uwierzytelniających. |
Pilne działanie | 8,8 | 1,68 % | ||
| Korupcja pamięci w Safari może prowadzić do zdalnego wykonania kodu przez przetwarzanie złośliwie przygotowanych treści internetowych. | Korupcja pamięci w Safari może prowadzić do zdalnego wykonania kodu przez przetwarzanie złośliwie przygotowanych treści internetowych. |
Pilne działanie | 8,8 | 1,6 % | ||
| Wykonanie złośliwego kodu w WebKit przez przetwarzanie złośliwych treści internetowych. | Wykonanie złośliwego kodu w WebKit przez przetwarzanie złośliwych treści internetowych. |
Pilne działanie | 8,8 | 1,56 % | ||
| A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP… | A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (virtual) and CN-Series (container)… |
Pilne działanie | 8,6 | 2,54 % | ||
| Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to… | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
Pilne działanie | 8,8 | 1,51 % | ||
| reviewdog/action-setup is a GitHub action that installs reviewdog. | reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use… |
Pilne działanie | 8,6 | 2,44 % | ||
| The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. | The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. |
Pilne działanie | 5,4 | 18,42 % | ||
| Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. | Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware… |
Pilne działanie | 7,8 | 6,37 % | ||
| W Adobe Flash Player i AIR występuje błąd umożliwiający zdalne wykonanie kodu lub DoS. | W Adobe Flash Player i AIR występuje błąd umożliwiający zdalne wykonanie kodu lub DoS. |
Pilne działanie | 7,5 | 7,8 % | ||
| Podatność w Windows Installer umożliwia eskalację uprawnień. | Podatność w Windows Installer umożliwia eskalację uprawnień. |
Pilne działanie | 7,8 | 6,26 % | ||
| Błąd zapisu poza granicami w systemach Apple może prowadzić do zdalnego wykonania kodu. | Błąd zapisu poza granicami w systemach Apple może prowadzić do zdalnego wykonania kodu. |
Pilne działanie | 8,8 | 1,24 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.