Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mishandles symlinks with trailing slashes on macOS and Linux kernels lacking openat2. A guest with write access to any…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: fix refcounting of iso_conn
iso_conn_del() and iso_chan_del() have a race that results to double-put
of iso_conn:
[Task hdev->workqueue] [Task 2]
iso_conn_del iso_chan_del…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Authorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd. Co. BAPSİS allows Exploitation of Trusted Identifiers.
This issue affects BAPSİS: before v.202604152042.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix [a-z0-9]+(?:[.\-][a-z0-9]+)* is unbounded. Input consisting of many alternating label separators can be…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: lock sk in iso_connect_ind
Accessing iso_pi(sk)->conn requires lock_sock, which is not taken in the
"ev3" part of iso_connect_ind. It may also be NULL if socket has
transitioned away from the LISTEN/CONNECT…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: avoid deadlocks in iso_sock_timeout
iso_sock_timeout() takes lock_sock, so sync disabling the timer while
holding that lock may deadlock.
iso_sock_timeout() may also run concurrently with iso_conn_del(),…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mishandles symlinks with trailing slashes on macOS and Linux kernels lacking openat2. A guest with write access to any…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: fix refcounting of iso_conn
iso_conn_del() and iso_chan_del() have a race that results to double-put
of iso_conn:
[Task hdev->workqueue] [Task 2]
iso_conn_del iso_chan_del…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Authorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd. Co. BAPSİS allows Exploitation of Trusted Identifiers.
This issue affects BAPSİS: before v.202604152042.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix [a-z0-9]+(?:[.\-][a-z0-9]+)* is unbounded. Input consisting of many alternating label separators can be…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: lock sk in iso_connect_ind
Accessing iso_pi(sk)->conn requires lock_sock, which is not taken in the
"ev3" part of iso_connect_ind. It may also be NULL if socket has
transitioned away from the LISTEN/CONNECT…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: avoid deadlocks in iso_sock_timeout
iso_sock_timeout() takes lock_sock, so sync disabling the timer while
holding that lock may deadlock.
iso_sock_timeout() may also run concurrently with iso_conn_del(),…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki