Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset.
To remediate this issue, users should upgrade to version 2.267.0 or…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests.
This could allow a local attacker to extract password…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in
unconfined context
This issue affects policycoreutils through 3.10.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe…
Opis źródłowy NVD · ENalert CERT.pl · CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Uncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG_new, SMPEG_new_rwops or SMPEG_new_data to trigger a…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F,…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3_detect() in parseutils.c that reads past truncated miniSEED 2 record buffers. Attackers can supply a 40 to 47 byte buffer passing MS2_ISVALIDHEADER to msr3_parse() or ms3_detect(), over-reading up to 8 bytes…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash applications by supplying a PSID/RSID file with an unchecked data offset. Attackers can set the header data offset beyond the file size, wrapping the length calculation so resolveAddrs()…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBlk…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
CVSS
6,8
EPSS
0,13 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset.
To remediate this issue, users should upgrade to version 2.267.0 or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests.
This could allow a local attacker to extract password…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in
unconfined context
This issue affects policycoreutils through 3.10.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe…
Opis źródłowy NVD · EN
Do wiadomości
alert CERT.pl · CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Uncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG_new, SMPEG_new_rwops or SMPEG_new_data to trigger a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3_detect() in parseutils.c that reads past truncated miniSEED 2 record buffers. Attackers can supply a 40 to 47 byte buffer passing MS2_ISVALIDHEADER to msr3_parse() or ms3_detect(), over-reading up to 8 bytes…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash applications by supplying a PSID/RSID file with an unchecked data offset. Attackers can set the header data offset beyond the file size, wrapping the length calculation so resolveAddrs()…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBlk…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
6,8
0,13 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.