Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Siebel Apps - Life Sciences.…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development.…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow while processing a `PUT` request. The condition is reachable by an unauthenticated remote client with a single malformed request.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
CVSS
8,8
EPSS
0,39 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Siebel Apps - Life Sciences.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow while processing a `PUT` request. The condition is reachable by an unauthenticated remote client with a single malformed request.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
8,8
0,39 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.