KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Luka w Oracle Hyperion Calculation Manager pozwala na nieautoryzowany dostęp do danych.
Przepełnienie bufora w FortiOS umożliwia zdalne wykonanie dowolnego kodu przez uwierzytelnionego atakującego.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Mobile…
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Mobile…
Błąd w imgsensor może prowadzić do lokalnej eskalacji uprawnień przy aplikacji.
Brak uwierzytelnienia w WMI umożliwia lokalnemu atakującemu wywołanie przerwania systemowego.
A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4. Improper protection of the execution path on the local device allows attackers, with local access to the…
Nieprawidłowe wykorzystanie nagłówków w Astro umożliwia obejście zabezpieczeń i ataki SSRF.
Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This…
Brak sanitizacji etykiet w Okta Access Gateway umożliwia zdalne wykonanie kodu.
Luka use-after-free w produktach ESET Linux może prowadzić do paniki jądra systemu.
Błąd w urządzeniu virtio-blk w QEMU umożliwia atakującemu złośliwemu wywołanie odmowy usługi.
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a…
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to…
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where JD Edwards…
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with…
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with…
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily…
An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via sending a crafted packet to the eventd relay service.
Niekontrolowana ścieżka wyszukiwania w Approximate Bayesian Inference Framework umożliwia eskalację uprawnień.
Niekontrolowana ścieżka wyszukiwania w Hardware-Aware-Automated-MachineLearning pozwala na eskalację uprawnień.
Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This…
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-3958.
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435340; Issue ID: MSV-4038.
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435342; Issue ID: MSV-4039.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Luka w Oracle Hyperion Calculation Manager pozwala na nieautoryzowany dostęp do danych. | Luka w Oracle Hyperion Calculation Manager pozwala na nieautoryzowany dostęp do danych. |
Do wiadomości | 6,7 | 0,17 % | ||
| Przepełnienie bufora w FortiOS umożliwia zdalne wykonanie dowolnego kodu przez uwierzytelnionego atakującego. | Przepełnienie bufora w FortiOS umożliwia zdalne wykonanie dowolnego kodu przez uwierzytelnionego atakującego. |
Do wiadomości | 6,6 | 0,67 % | ||
| Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Mobile… |
Do wiadomości | 6,7 | 0,17 % | ||
| Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Mobile… |
Do wiadomości | 6,7 | 0,17 % | ||
| Błąd w imgsensor może prowadzić do lokalnej eskalacji uprawnień przy aplikacji. | Błąd w imgsensor może prowadzić do lokalnej eskalacji uprawnień przy aplikacji. |
Do wiadomości | 6,7 | 0,17 % | ||
| Brak uwierzytelnienia w WMI umożliwia lokalnemu atakującemu wywołanie przerwania systemowego. | Brak uwierzytelnienia w WMI umożliwia lokalnemu atakującemu wywołanie przerwania systemowego. |
Do wiadomości | 6,7 | 0,17 % | ||
| A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the… | A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4. Improper protection of the execution path on the local device allows attackers, with local access to the… |
Do wiadomości | 6,7 | 0,17 % | ||
| Nieprawidłowe wykorzystanie nagłówków w Astro umożliwia obejście zabezpieczeń i ataki SSRF. | Nieprawidłowe wykorzystanie nagłówków w Astro umożliwia obejście zabezpieczeń i ataki SSRF. |
Do wiadomości | 6,5 | 1,16 % | ||
| Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an… | Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This… |
Do wiadomości | 6,7 | 0,16 % | ||
| Brak sanitizacji etykiet w Okta Access Gateway umożliwia zdalne wykonanie kodu. | Brak sanitizacji etykiet w Okta Access Gateway umożliwia zdalne wykonanie kodu. |
Do wiadomości | 6,7 | 0,16 % | ||
| Luka use-after-free w produktach ESET Linux może prowadzić do paniki jądra systemu. | Luka use-after-free w produktach ESET Linux może prowadzić do paniki jądra systemu. |
Do wiadomości | 6,7 | 0,16 % | ||
| Błąd w urządzeniu virtio-blk w QEMU umożliwia atakującemu złośliwemu wywołanie odmowy usługi. | Błąd w urządzeniu virtio-blk w QEMU umożliwia atakującemu złośliwemu wywołanie odmowy usługi. |
Do wiadomości | 6,7 | 0,16 % | ||
| An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. | An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a… |
Do wiadomości | 6,7 | 0,16 % | ||
| Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to… |
Do wiadomości | 6,7 | 0,16 % | ||
| Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where JD Edwards… |
Do wiadomości | 6,7 | 0,16 % | ||
| Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with… |
Do wiadomości | 6,7 | 0,16 % | ||
| Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with… |
Do wiadomości | 6,7 | 0,16 % | ||
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily… |
Do wiadomości | 6,7 | 0,16 % | ||
| An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial… | An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via sending a crafted packet to the eventd relay service. |
Do wiadomości | 6,7 | 0,16 % | ||
| Niekontrolowana ścieżka wyszukiwania w Approximate Bayesian Inference Framework umożliwia eskalację uprawnień. | Niekontrolowana ścieżka wyszukiwania w Approximate Bayesian Inference Framework umożliwia eskalację uprawnień. |
Do wiadomości | 6,7 | 0,16 % | ||
| Niekontrolowana ścieżka wyszukiwania w Hardware-Aware-Automated-MachineLearning pozwala na eskalację uprawnień. | Niekontrolowana ścieżka wyszukiwania w Hardware-Aware-Automated-MachineLearning pozwala na eskalację uprawnień. |
Do wiadomości | 6,7 | 0,16 % | ||
| Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow… | Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This… |
Do wiadomości | 6,7 | 0,16 % | ||
| In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-3958. |
Do wiadomości | 6,7 | 0,16 % | ||
| In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435340; Issue ID: MSV-4038. |
Do wiadomości | 6,7 | 0,16 % | ||
| In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435342; Issue ID: MSV-4039. |
Do wiadomości | 6,7 | 0,16 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.