Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit.…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite.…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
CVSS
8,8
EPSS
0,45 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
8,8
0,45 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.