CVE Vulnerability Catalog

Remote code execution vulnerability in Microsoft Outlook. Allows an attacker to execute code remotely on the victim's machine.

Security feature bypass vulnerability in Internet Shortcut Files. Allows an attacker to bypass system security features.

Microsoft Exchange Server Elevation of Privilege Vulnerability. Technical details are not provided in the description.

A security feature bypass vulnerability in Windows SmartScreen.

Elevation of privilege vulnerability in the Windows kernel, allowing an attacker to gain higher privileges on the system.

An out-of-bounds write vulnerability in Fortinet FortiOS and FortiProxy across multiple versions. It allows an attacker to execute unauthorized code or commands via specifically crafted requests.

A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA. It allows an attacker to access certain restricted resources without authentication.

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, leading to a double free in nf_hook_slow().

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.

Problem z myleniem typów został rozwiązany dzięki poprawionym kontrolom. Wykryta podatność dotyczy przetwarzania złośliwie przygotowanej zawartości internetowej, co może prowadzić do wykonania dowolnego kodu.

A critical path traversal vulnerability exists in D-Link DIR-859 1.06B01 in the /hedwig.cgi file of the HTTP POST Request Handler. Manipulation of the 'service' argument allows remote attack, and the exploit has been publicly disclosed.

W NetScaler ADC i NetScaler Gateway występuje niewłaściwe ograniczenie operacji w obrębie bufora pamięci, co umożliwia nieautoryzowane zdalne zablokowanie usługi oraz odczyt pamięci poza dozwolonym zakresem.

A code injection vulnerability in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP, or SNIP management interface to perform authenticated (low privileged) remote code execution on the Management Interface.

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.

A command injection vulnerability in web components of Ivanti Connect Secure and Ivanti Policy Secure. It allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure. It allows a remote attacker to access restricted resources by bypassing control checks.

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Wystąpił problem związany z użyciem po zwolnieniu pamięci, który został rozwiązany poprzez poprawę zarządzania pamięcią. Problem ten został naprawiony w iOS 17, iPadOS 17, iOS 15.8.7 oraz iPadOS 15.8.7.

The issue was addressed with improved checks in macOS Ventura 13.1, watchOS 9.2, iOS 16.2, iPadOS 16.2, and tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of reports that this issue may have been exploited against versions of iOS released before iOS 15.7.1.