KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Wstrzyknięcie SQL w No Code Platform od Xpoda umożliwia nieautoryzowany dostęp do danych.
Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox…
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injection. This issue affects Turkhotspot 5651 Loglama: from 5.1.2 before 5.1.3.
Wstrzyknięcie SQL w cool-admin-java umożliwia nieautoryzowany dostęp do bazy danych.
Wstrzyknięcie SQL w systemie zarządzania laboratorium GisLab umożliwia nieautoryzowany dostęp do danych.
Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator (crypto/rand) fails, both functions silently fall back to returning predictable UUID values, including the zero UUID…
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.
Błąd w funkcji nvmet_tcp_build_pdu_iovec w jądrze Linuxa może prowadzić do naruszenia pamięci, co skutkuje awarią systemu.
Przepełnienie bufora w sterowniku atlantic w jądrze Linux prowadzi do paniki systemu.
A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be…
The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it possible for unauthenticated attackers to extract sensitive data including authentication credentials, which can be used to log in as…
Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A party able to authenticate through the affected external identity flow can obtain a full session without the passkey verification enforced during…
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected…
Wyścig w mptcp_pm_del_add_timer() w jądrze Linux prowadzi do użycia po zwolnieniu pamięci.
Wyścig warunków w mptcp_schedule_work() w jądrze Linux prowadzi do użycia po zwolnieniu.
Błąd use-after-free w komponencie GMP umożliwia zdalne wykonanie kodu.
A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_index.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is…
A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/admin_feature.php. Performing a manipulation of the argument pid results in sql injection. The attack may be initiated remotely. The exploit has been released…
A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file /admin/admin_product.ph. Executing a manipulation of the argument pid can lead to sql injection. The attack may be launched remotely. The exploit has been made…
Błąd w jądrze Linuxa w obsłudze asynchronicznego deszyfrowania może prowadzić do niebezpiecznego dostępu do pamięci.
Użycie dst_dev_rcu() w jądrze Linux zapobiega możliwemu użyciu po zwolnieniu.
SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in _maybe_unwrap_pickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when…
Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly known SECRET_KEY and LIVE_SERVER_SECRET_KEY defaults that remain active when operators do not override them. The top-level setup.sh…
Przepełnienie bufora w dekoderze DNG w libimagecodec.quram.so umożliwia zdalne wykonanie kodu.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Wstrzyknięcie SQL w No Code Platform od Xpoda umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w No Code Platform od Xpoda umożliwia nieautoryzowany dostęp do danych. |
W tym tygodniu | 9,8 | 0,47 % | ||
| Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. | Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox… |
W tym tygodniu | 9,8 | 0,47 % | ||
| Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communication Services Inc. | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injection. This issue affects Turkhotspot 5651 Loglama: from 5.1.2 before 5.1.3. |
W tym tygodniu | 9,8 | 0,47 % | ||
| Wstrzyknięcie SQL w cool-admin-java umożliwia nieautoryzowany dostęp do bazy danych. | Wstrzyknięcie SQL w cool-admin-java umożliwia nieautoryzowany dostęp do bazy danych. |
W tym tygodniu | 9,8 | 0,47 % | ||
| Wstrzyknięcie SQL w systemie zarządzania laboratorium GisLab umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w systemie zarządzania laboratorium GisLab umożliwia nieautoryzowany dostęp do danych. |
W tym tygodniu | 9,8 | 0,47 % | ||
| Fiber Utils is a collection of common functions created for Fiber. | Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator (crypto/rand) fails, both functions silently fall back to returning predictable UUID values, including the zero UUID… |
W tym tygodniu | 9,8 | 0,47 % | ||
| A race condition was addressed with improved state handling. | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination. |
W tym tygodniu | 9,8 | 0,47 % | ||
| A race condition was addressed with improved state handling. | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory. |
W tym tygodniu | 9,8 | 0,47 % | ||
| Błąd w funkcji nvmet_tcp_build_pdu_iovec w jądrze Linuxa może prowadzić do naruszenia pamięci, co skutkuje awarią systemu. | Błąd w funkcji nvmet_tcp_build_pdu_iovec w jądrze Linuxa może prowadzić do naruszenia pamięci, co skutkuje awarią systemu. |
W tym tygodniu | 9,8 | 0,47 % | ||
| Przepełnienie bufora w sterowniku atlantic w jądrze Linux prowadzi do paniki systemu. | Przepełnienie bufora w sterowniku atlantic w jądrze Linux prowadzi do paniki systemu. |
W tym tygodniu | 9,8 | 0,47 % | ||
| A flaw has been found in campcodes Online Student Enrollment System 1.0. | A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be… |
Pilne działanie | 9,8 | 0,47 % | ||
| The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the… | The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it possible for unauthenticated attackers to extract sensitive data including authentication credentials, which can be used to log in as… |
W tym tygodniu | 9,8 | 0,47 % | ||
| Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second… | Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A party able to authenticate through the affected external identity flow can obtain a full session without the passkey verification enforced during… |
W tym tygodniu | 9,8 | 0,47 % | ||
| Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated… | Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected… |
W tym tygodniu | 9,8 | 0,46 % | ||
| Wyścig w mptcp_pm_del_add_timer() w jądrze Linux prowadzi do użycia po zwolnieniu pamięci. | Wyścig w mptcp_pm_del_add_timer() w jądrze Linux prowadzi do użycia po zwolnieniu pamięci. |
W tym tygodniu | 9,8 | 0,46 % | ||
| Wyścig warunków w mptcp_schedule_work() w jądrze Linux prowadzi do użycia po zwolnieniu. | Wyścig warunków w mptcp_schedule_work() w jądrze Linux prowadzi do użycia po zwolnieniu. |
W tym tygodniu | 9,8 | 0,46 % | ||
| Błąd use-after-free w komponencie GMP umożliwia zdalne wykonanie kodu. | Błąd use-after-free w komponencie GMP umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 9,8 | 0,46 % | ||
| A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. | A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_index.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is… |
Pilne działanie | 9,8 | 0,46 % | ||
| A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. | A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/admin_feature.php. Performing a manipulation of the argument pid results in sql injection. The attack may be initiated remotely. The exploit has been released… |
Pilne działanie | 9,8 | 0,46 % | ||
| A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. | A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file /admin/admin_product.ph. Executing a manipulation of the argument pid can lead to sql injection. The attack may be launched remotely. The exploit has been made… |
Pilne działanie | 9,8 | 0,46 % | ||
| Błąd w jądrze Linuxa w obsłudze asynchronicznego deszyfrowania może prowadzić do niebezpiecznego dostępu do pamięci. | Błąd w jądrze Linuxa w obsłudze asynchronicznego deszyfrowania może prowadzić do niebezpiecznego dostępu do pamięci. |
W tym tygodniu | 9,8 | 0,46 % | ||
| Użycie dst_dev_rcu() w jądrze Linux zapobiega możliwemu użyciu po zwolnieniu. | Użycie dst_dev_rcu() w jądrze Linux zapobiega możliwemu użyciu po zwolnieniu. |
W tym tygodniu | 9,8 | 0,46 % | ||
| SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper… | SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in _maybe_unwrap_pickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when… |
W tym tygodniu | 9,8 | 0,46 % | ||
| Plane is an open-source project management tool. | Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly known SECRET_KEY and LIVE_SERVER_SECRET_KEY defaults that remain active when operators do not override them. The top-level setup.sh… |
W tym tygodniu | 9,8 | 0,46 % | ||
| Przepełnienie bufora w dekoderze DNG w libimagecodec.quram.so umożliwia zdalne wykonanie kodu. | Przepełnienie bufora w dekoderze DNG w libimagecodec.quram.so umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 9,8 | 0,46 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.