Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitrary code execution.This could cause high impact on confidentiality integrity and availability of the system.
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection.
This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,68 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure,…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
Look up the IRQ index in oct_hw->irqs instead of assuming
irq - irqs[0]. This supports non-contiguous IRQ numbers and
avoids incorrect ring indexing when irqs[0] is…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached without…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,64 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitrary code execution.This could cause high impact on confidentiality integrity and availability of the system.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection.
This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,68 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
Look up the IRQ index in oct_hw->irqs instead of assuming
irq - irqs[0]. This supports non-contiguous IRQ numbers and
avoids incorrect ring indexing when irqs[0] is…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached without…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,64 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,62 % · rekomendacja wg zapisanej polityki