Início / CVEs

Base de CVEs

Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.

252 resultado(s)

Exportar esta busca: RSS · CSV · STIX

CVE-2018-13374 Média · 4.3 KEV Urgente · 77 Exploit público Ransomware CWE-732 22/01/2019

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.

CVE-2018-1115 Crítica · 9.1 CWE-732 10/05/2018

Incorrect Permission Assignment for Critical Resource em Postgresql

postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.