CyberSigur / Security Intelligence
Urmărește catalogul CISA Known Exploited Vulnerabilities. Caută după CVE, furnizor sau produs; informațiile sunt publicate de autoritatea americană CISA.
1.760 vulnerabilități · Pagina 56 din 88
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.
Apply updates per vendor instructions.
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
Apply updates per vendor instructions.
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.
Apply updates per vendor instructions.
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Apply updates per vendor instructions.
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
Apply updates per vendor instructions.
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
Apply updates per vendor instructions.
Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.
Apply updates per vendor instructions.
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Apply updates per vendor instructions.
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Apply updates per vendor instructions.
Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."
Apply updates per vendor instructions.
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
Apply updates per vendor instructions.
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
Apply updates per vendor instructions.
Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.
Apply updates per vendor instructions.
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.
Apply updates per vendor instructions.
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.
Apply updates per vendor instructions.
Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.
Apply updates per vendor instructions.
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands.
Apply updates per vendor instructions.
Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.
Apply updates per vendor instructions.
InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.
Apply updates per vendor instructions.
The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).
Apply updates per vendor instructions.