Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB_SELF_HOST endpoint. Attackers can set instanceUrl…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the profile_id POST parameter is passed to PHP unserialize() without proper handling, allowing remote, unauthenticated attackers to inject arbitrary PHP objects and potentially…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel.
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT_LENGTH results in stack-based buffer overflow. Remote…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user.
Users are recommended to upgrade to version 3.5.3, which fixes this issue.
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 1,6 % · rekomendacja wg zapisanej polityki
nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust,…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted sh -c, allowing command substitution via $() and backticks. Attackers can inject arbitrary OS commands through the Live plugin on_publish.php endpoint despite…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the…
Opis źródłowy NVD · ENCVSS 9,4 · EPSS 0,09 % · rekomendacja wg zapisanej polityki
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,59 % · rekomendacja wg zapisanej polityki
CVSS
9,3
EPSS
0,59 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB_SELF_HOST endpoint. Attackers can set instanceUrl…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the profile_id POST parameter is passed to PHP unserialize() without proper handling, allowing remote, unauthenticated attackers to inject arbitrary PHP objects and potentially…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT_LENGTH results in stack-based buffer overflow. Remote…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user.
Users are recommended to upgrade to version 3.5.3, which fixes this issue.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 1,6 % · rekomendacja wg zapisanej polityki
nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted sh -c, allowing command substitution via $() and backticks. Attackers can inject arbitrary OS commands through the Live plugin on_publish.php endpoint despite…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,4 · EPSS 0,09 % · rekomendacja wg zapisanej polityki
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,59 % · rekomendacja wg zapisanej polityki
9,3
0,59 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.