KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Brak sanitizacji parametru GET w Guardian language-system umożliwia zdalne wykonanie poleceń OS.
Wykorzystanie SQL Expressions w Grafanie umożliwia zdalne wykonanie kodu.
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system,…
A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely.
SiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbitrary file assets, allowing stored cross-site scripting attacks. Authenticated attackers can upload HTML files as assets and execute scripts with full kernel API access when the workspace…
SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject malicious payloads through the setAttrViewColWidth API that break out of style attributes and inject event handlers on…
SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stored cross-site scripting through eight unescaped render sites. Attackers can inject event-handler attributes by including quotation marks in the color value, executing arbitrary…
SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endpoint. Attackers can inject malicious markup into annotation fields that execute as script in the PDF renderer with full Node.js access when a user opens an annotated PDF.
Brak uwierzytelnienia w Nezha Monitoring pozwala na dostęp do plików systemowych.
Wykonanie poleceń w interfejsie zarządzania umożliwia zdalne przejęcie kontroli przez atakującego.
RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Although the interface displayed only a shortened representation of each key, the full token was embedded in hidden form fields used by the enable/disable, private-access, and delete…
Brak walidacji URL w Grav API pozwala na przejęcie konta przez atakującego.
UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a higher role such as admin) via the user-edit endpoint by supplying or modifying role_id or organisation_id fields in the edit request.
Brak uwierzytelnienia w Budibase pozwala atakującemu na uzyskanie pre-signed URL do dowolnego zasobnika S3.
Wstrzyknięcie roli administratora w Signal K Server umożliwia eskalację uprawnień.
Luka w FileThingie umożliwia przesyłanie złośliwych plików, co prowadzi do zdalnego wykonania kodu.
Błąd w wtyczce Simple Membership umożliwia atakującym przejęcie konta administratora.
Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff, leading to stored/reflected XSS.
An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then…
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Niebezpieczna deserializacja w kotaemon umożliwia zdalne wykonanie kodu przez atakujących.
Luka w Oracle Agile Engineering Data Management pozwala na nieautoryzowany dostęp do danych.
Przepełnienie bufora w NICO-FTP umożliwia zdalne wykonanie kodu przez wysyłanie złośliwych poleceń FTP.
Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file.…
Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Brak sanitizacji parametru GET w Guardian language-system umożliwia zdalne wykonanie poleceń OS. | Brak sanitizacji parametru GET w Guardian language-system umożliwia zdalne wykonanie poleceń OS. |
W tym tygodniu | 9,3 | 0,93 % | ||
| Wykorzystanie SQL Expressions w Grafanie umożliwia zdalne wykonanie kodu. | Wykorzystanie SQL Expressions w Grafanie umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 9,1 | 1,93 % | ||
| ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. | ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system,… |
W tym tygodniu | 9,4 | 0,43 % | ||
| A flaw has been found in Netcore NR268 1.7.121109. | A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely. |
W tym tygodniu | 9,4 | 0,43 % | ||
| SiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbitrary file assets, allowing… | SiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbitrary file assets, allowing stored cross-site scripting attacks. Authenticated attackers can upload HTML files as assets and execute scripts with full kernel API access when the workspace… |
W tym tygodniu | 9,4 | 0,43 % | ||
| SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into… | SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject malicious payloads through the setAttrViewColWidth API that break out of style attributes and inject event handlers on… |
W tym tygodniu | 9,4 | 0,43 % | ||
| SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stored cross-site… | SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stored cross-site scripting through eight unescaped render sites. Attackers can inject event-handler attributes by including quotation marks in the color value, executing arbitrary… |
W tym tygodniu | 9,4 | 0,43 % | ||
| SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endpoint. | SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endpoint. Attackers can inject malicious markup into annotation fields that execute as script in the PDF renderer with full Node.js access when a user opens an annotated PDF. |
W tym tygodniu | 9,4 | 0,43 % | ||
| Brak uwierzytelnienia w Nezha Monitoring pozwala na dostęp do plików systemowych. | Brak uwierzytelnienia w Nezha Monitoring pozwala na dostęp do plików systemowych. |
W tym tygodniu | 9,1 | 1,93 % | ||
| Wykonanie poleceń w interfejsie zarządzania umożliwia zdalne przejęcie kontroli przez atakującego. | Wykonanie poleceń w interfejsie zarządzania umożliwia zdalne przejęcie kontroli przez atakującego. |
W tym tygodniu | 9,3 | 0,93 % | ||
| RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. | RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Although the interface displayed only a shortened representation of each key, the full token was embedded in hidden form fields used by the enable/disable, private-access, and delete… |
W tym tygodniu | 9,4 | 0,42 % | ||
| Brak walidacji URL w Grav API pozwala na przejęcie konta przez atakującego. | Brak walidacji URL w Grav API pozwala na przejęcie konta przez atakującego. |
W tym tygodniu | 9,4 | 0,42 % | ||
| UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a… | UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a higher role such as admin) via the user-edit endpoint by supplying or modifying role_id or organisation_id fields in the edit request. |
W tym tygodniu | 9,4 | 0,42 % | ||
| Brak uwierzytelnienia w Budibase pozwala atakującemu na uzyskanie pre-signed URL do dowolnego zasobnika S3. | Brak uwierzytelnienia w Budibase pozwala atakującemu na uzyskanie pre-signed URL do dowolnego zasobnika S3. |
Pilne działanie | 9,4 | 0,42 % | ||
| Wstrzyknięcie roli administratora w Signal K Server umożliwia eskalację uprawnień. | Wstrzyknięcie roli administratora w Signal K Server umożliwia eskalację uprawnień. |
Pilne działanie | 9,4 | 0,42 % | ||
| Luka w FileThingie umożliwia przesyłanie złośliwych plików, co prowadzi do zdalnego wykonania kodu. | Luka w FileThingie umożliwia przesyłanie złośliwych plików, co prowadzi do zdalnego wykonania kodu. |
Pilne działanie | 9,3 | 0,92 % | ||
| Błąd w wtyczce Simple Membership umożliwia atakującym przejęcie konta administratora. | Błąd w wtyczce Simple Membership umożliwia atakującym przejęcie konta administratora. |
W tym tygodniu | 9,4 | 0,42 % | ||
| Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to a… | Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff, leading to stored/reflected XSS. |
W tym tygodniu | 9,4 | 0,42 % | ||
| An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated… | An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then… |
W tym tygodniu | 9,4 | 0,41 % | ||
| Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle… |
W tym tygodniu | 9,4 | 0,41 % | ||
| Niebezpieczna deserializacja w kotaemon umożliwia zdalne wykonanie kodu przez atakujących. | Niebezpieczna deserializacja w kotaemon umożliwia zdalne wykonanie kodu przez atakujących. |
W tym tygodniu | 9,3 | 0,91 % | ||
| Luka w Oracle Agile Engineering Data Management pozwala na nieautoryzowany dostęp do danych. | Luka w Oracle Agile Engineering Data Management pozwala na nieautoryzowany dostęp do danych. |
W tym tygodniu | 9,4 | 0,41 % | ||
| Przepełnienie bufora w NICO-FTP umożliwia zdalne wykonanie kodu przez wysyłanie złośliwych poleceń FTP. | Przepełnienie bufora w NICO-FTP umożliwia zdalne wykonanie kodu przez wysyłanie złośliwych poleceń FTP. |
Pilne działanie | 9,3 | 0,91 % | ||
| Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. | Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file.… |
W tym tygodniu | 9,4 | 0,41 % | ||
| Affected devices do not properly restrict executable content contained in imported trace files. | Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow… |
W tym tygodniu | 9,4 | 0,41 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.