Vulnerabilidades em Talos
127 resultadosAnálise Vexday
Com 127 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, a taxa de exploração ativa da Talos situa-se abaixo da média geral do catálogo, o que indica menor pressão de ameaças ativas no momento. No entanto, 36 vulnerabilidades classificadas como críticas representam uma superfície de risco considerável que merece atenção contínua. O tipo de falha mais recorrente é CWE-416 (Use-After-Free), categoria que historicamente favorece execução de código arbitrário e elevação de privilégios. A CVE mais perigosa identificada atualmente é CVE-2018-3949, com score EPSS de 0,533 — valor que indica probabilidade relevante de exploração —, sendo também a única com prova de conceito pública disponível, o que a torna prioritária para equipes de resposta.
CVE-2017-12118MEDIUMAn exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7cEPSS 1.6%CVE-2017-2858HIGHAn exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8. A specially craftEPSS 1.6%CVE-2017-12115MEDIUMAn exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d0EPSS 1.6%CVE-2017-12113MEDIUMAn exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d00161EPSS 1.5%CVE-2018-3980HIGHAn exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. A specially crafted TIFF image proEPSS 1.5%CVE-2018-3889HIGHA specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can EPSS 1.5%CVE-2018-3861HIGHA specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker canEPSS 1.5%CVE-2017-2880HIGHAn memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file EPSS 1.4%CVE-2017-12112MEDIUMAn exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618EPSS 1.4%CVE-2018-3907CRITICALAn exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware verEPSS 1.4%CVE-2018-4039HIGHAn exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can alloEPSS 1.4%CVE-2018-3886HIGHA memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image prEPSS 1.4%CVE-2018-3888HIGHA memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image prEPSS 1.4%CVE-2018-3887HIGHA memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image prEPSS 1.4%CVE-2017-12114MEDIUMAn exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7EPSS 1.4%CVE-2017-2852HIGHAn exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. A speciallyEPSS 1.4%CVE-2017-2860HIGHAn exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A speciallyEPSS 1.4%CVE-2017-12117MEDIUMAn exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7EPSS 1.4%CVE-2018-4038HIGHAn exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, whilEPSS 1.3%CVE-2018-3909CRITICALAn exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware verEPSS 1.3%