Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
ipvs: do not propagate one-packet flag to synced conns
Synced connections can be created before their destination exists. When
the destination is later added, ip_vs_bind_dest() copies connection flags
from the destination into…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Fix use-after-free in cifs_try_adding_channels()
cifs_try_adding_channels() takes a temporary reference to an interface
before dropping iface_lock. If cifs_ses_add_channel() fails, it drops
that reference and then…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'eltdf_membership_check_facebook_user' and the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through extract($_REQUEST) and directly incorporates valor, valor_pago, id_pessoa, id_socio, and id_sociotipo into UPDATE, INSERT, and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST data through extract($_REQUEST) and interpolates codigo, descricao, data_emissao, data_vencimento, data_pagamento, valor,…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_action()` performs no server-side check — via transient, session marker, or equivalent — that a requester completed…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
svcauth_gss_decode_credbody() writes the caller's
rpc_gss_wire_cred field by field and assigns gc_ctx.len only on
the success tail. The caller storage is…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Prevent client use-after-free during blocked-lock reaping
A bare lock owner -- its only remaining reference a blocked lock on
nn->blocked_locks_lru -- holds a raw pointer to its nfs4_client but
no reference keeping the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipvs: do not propagate one-packet flag to synced conns
Synced connections can be created before their destination exists. When
the destination is later added, ip_vs_bind_dest() copies connection flags
from the destination into…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Fix use-after-free in cifs_try_adding_channels()
cifs_try_adding_channels() takes a temporary reference to an interface
before dropping iface_lock. If cifs_ses_add_channel() fails, it drops
that reference and then…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'eltdf_membership_check_facebook_user' and the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through extract($_REQUEST) and directly incorporates valor, valor_pago, id_pessoa, id_socio, and id_sociotipo into UPDATE, INSERT, and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST data through extract($_REQUEST) and interpolates codigo, descricao, data_emissao, data_vencimento, data_pagamento, valor,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_action()` performs no server-side check — via transient, session marker, or equivalent — that a requester completed…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
svcauth_gss_decode_credbody() writes the caller's
rpc_gss_wire_cred field by field and assigns gc_ctx.len only on
the success tail. The caller storage is…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Prevent client use-after-free during blocked-lock reaping
A bare lock owner -- its only remaining reference a blocked lock on
nn->blocked_locks_lru -- holds a raw pointer to its nfs4_client but
no reference keeping the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki