KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Nieprawidłowe unieważnianie tokenów OAuth w Mattermost umożliwia dostęp deaktywowanym użytkownikom.
Niewystarczająca walidacja danych w DevTools Google Chrome pozwala na wyciek danych między źródłami.
Niewystarczające egzekwowanie polityki w WebView w Google Chrome na Androidzie pozwala na obejście ograniczeń nawigacji.
Defekt masowego przypisania w K2 pozwala użytkownikom na modyfikację danych w bazie.
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful…
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an…
Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation (CAPEC-130).
Błąd w IBM Sterling B2B Integrator i File Gateway pozwala uwierzytelnionemu użytkownikowi na dostęp do wrażliwych danych.
Błąd logiczny w modemie komórkowym może prowadzić do zdalnego odmowy usługi bez interakcji użytkownika.
Błędne sprawdzenie granic w SwDcpItg może prowadzić do zdalnego odmowy usługi.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to cause a denial of service condition by uploading specially crafted images.
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning.
Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Błąd użycia po zwolnieniu pamięci w warstwie ATT Bluetooth prowadzi do awarii hosta Bluetooth.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Nieprawidłowe unieważnianie tokenów OAuth w Mattermost umożliwia dostęp deaktywowanym użytkownikom. | Nieprawidłowe unieważnianie tokenów OAuth w Mattermost umożliwia dostęp deaktywowanym użytkownikom. |
Do wiadomości | 6,5 | 0,3 % | ||
| Niewystarczająca walidacja danych w DevTools Google Chrome pozwala na wyciek danych między źródłami. | Niewystarczająca walidacja danych w DevTools Google Chrome pozwala na wyciek danych między źródłami. |
Do wiadomości | 6,5 | 0,3 % | ||
| Niewystarczające egzekwowanie polityki w WebView w Google Chrome na Androidzie pozwala na obejście ograniczeń nawigacji. | Niewystarczające egzekwowanie polityki w WebView w Google Chrome na Androidzie pozwala na obejście ograniczeń nawigacji. |
Do wiadomości | 6,5 | 0,3 % | ||
| Defekt masowego przypisania w K2 pozwala użytkownikom na modyfikację danych w bazie. | Defekt masowego przypisania w K2 pozwala użytkownikom na modyfikację danych w bazie. |
Do wiadomości | 6,5 | 0,3 % | ||
| Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL… |
Do wiadomości | 6,5 | 0,3 % | ||
| Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise… |
Do wiadomości | 6,5 | 0,3 % | ||
| Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful… |
Do wiadomości | 6,5 | 0,3 % | ||
| Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols… |
Do wiadomości | 6,5 | 0,3 % | ||
| Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols… |
Do wiadomości | 6,5 | 0,3 % | ||
| Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols… |
Do wiadomości | 6,5 | 0,3 % | ||
| Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise… |
Do wiadomości | 6,5 | 0,3 % | ||
| Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise… |
Do wiadomości | 6,5 | 0,3 % | ||
| Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via… | Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Do wiadomości | 6,5 | 0,3 % | ||
| Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a… | Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Do wiadomości | 6,5 | 0,3 % | ||
| Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox… | Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
Do wiadomości | 6,5 | 0,3 % | ||
| Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an… |
Do wiadomości | 6,5 | 0,3 % | ||
| Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node,… | Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation (CAPEC-130). |
Do wiadomości | 6,5 | 0,3 % | ||
| Błąd w IBM Sterling B2B Integrator i File Gateway pozwala uwierzytelnionemu użytkownikowi na dostęp do wrażliwych danych. | Błąd w IBM Sterling B2B Integrator i File Gateway pozwala uwierzytelnionemu użytkownikowi na dostęp do wrażliwych danych. |
Do wiadomości | 6,5 | 0,3 % | ||
| Błąd logiczny w modemie komórkowym może prowadzić do zdalnego odmowy usługi bez interakcji użytkownika. | Błąd logiczny w modemie komórkowym może prowadzić do zdalnego odmowy usługi bez interakcji użytkownika. |
Do wiadomości | 6,5 | 0,3 % | ||
| Błędne sprawdzenie granic w SwDcpItg może prowadzić do zdalnego odmowy usługi. | Błędne sprawdzenie granic w SwDcpItg może prowadzić do zdalnego odmowy usługi. |
Do wiadomości | 6,5 | 0,3 % | ||
| GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2… | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to cause a denial of service condition by uploading specially crafted images. |
Do wiadomości | 6,5 | 0,3 % | ||
| Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory… | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Do wiadomości | 6,5 | 0,3 % | ||
| Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. | Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning. |
Do wiadomości | 6,5 | 0,3 % | ||
| Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain… | Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
Do wiadomości | 6,5 | 0,3 % | ||
| Błąd użycia po zwolnieniu pamięci w warstwie ATT Bluetooth prowadzi do awarii hosta Bluetooth. | Błąd użycia po zwolnieniu pamięci w warstwie ATT Bluetooth prowadzi do awarii hosta Bluetooth. |
Do wiadomości | 6,5 | 0,3 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.