Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix data race on CQP request done
KCSAN detects a data race on cqp_request->request_done memory location
which is accessed locklessly in irdma_handle_cqp_op while being
updated in irdma_cqp_ce_handler.
Annotate…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: double free xprt_ctxt while still in use
When an RPC request is deferred, the rq_xprt_ctxt pointer is moved out
of the svc_rqst into the svc_deferred_req.
When the deferred request is revisited, the pointer is copied…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net: prevent skb corruption on frag list segmentation
Ian reported several skb corruptions triggered by rx-gro-list,
collecting different oops alike:
[ 62.624003] BUG: kernel NULL pointer dereference, address:…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to execute commands as root via Login Protection settings. Attackers can submit sshguard threshold, block time, or detection time values…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 6,55 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the component HTTP Request Handler. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 -m fontTools.varLib) script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 64
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 65
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 67
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 131
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix data race on CQP request done
KCSAN detects a data race on cqp_request->request_done memory location
which is accessed locklessly in irdma_handle_cqp_op while being
updated in irdma_cqp_ce_handler.
Annotate…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: double free xprt_ctxt while still in use
When an RPC request is deferred, the rq_xprt_ctxt pointer is moved out
of the svc_rqst into the svc_deferred_req.
When the deferred request is revisited, the pointer is copied…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net: prevent skb corruption on frag list segmentation
Ian reported several skb corruptions triggered by rx-gro-list,
collecting different oops alike:
[ 62.624003] BUG: kernel NULL pointer dereference, address:…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to execute commands as root via Login Protection settings. Attackers can submit sshguard threshold, block time, or detection time values…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 6,55 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the component HTTP Request Handler. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 -m fontTools.varLib) script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed.…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 64
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 65
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 67
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 131
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki