Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel to expose the entire server…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP codes via the returnCode delivery type. Attackers knowing a login name of a victim with OTP-Email and OTP-SMS enrolled can read both codes…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login path of @budibase/server. In sso.authenticate, when no existing user matches the incoming SSO subject, the server looks up pending user invites by the IdP-asserted email address alone — without validating…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,83 % · rekomendacja wg zapisanej polityki
mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert() and update() string…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: reject login PDUs declaring more data than was received
isert_login_recv_done() records how many bytes the HCA actually placed in
the login buffer, but nothing compares that against the length the login
PDU's BHS…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Reserve a terminator byte for the login payload
iscsi_target_check_login_request() rejects a login PDU whose
DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and
login->req_buf is allocated…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the user whose username matches the Google account email without enforcing the activated flag. Deactivated users with email-shaped usernames and still-live Google identities can…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthcheck endpoint. Attackers can send a crafted JSON payload with a…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out bypassed the rejection path. A response that two peers can read differently is then stored and served, allowing cache poisoning and…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary.
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4-alpha.3) contains a missing-authorization vulnerability in the /api/av/getAttributeViewSearchTarget endpoint. The route is registered with CheckAuth only and performs no…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
CVSS
9,2
EPSS
0,31 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel to expose the entire server…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP codes via the returnCode delivery type. Attackers knowing a login name of a victim with OTP-Email and OTP-SMS enrolled can read both codes…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login path of @budibase/server. In sso.authenticate, when no existing user matches the incoming SSO subject, the server looks up pending user invites by the IdP-asserted email address alone — without validating…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,83 % · rekomendacja wg zapisanej polityki
mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert() and update() string…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: reject login PDUs declaring more data than was received
isert_login_recv_done() records how many bytes the HCA actually placed in
the login buffer, but nothing compares that against the length the login
PDU's BHS…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Reserve a terminator byte for the login payload
iscsi_target_check_login_request() rejects a login PDU whose
DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and
login->req_buf is allocated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the user whose username matches the Google account email without enforcing the activated flag. Deactivated users with email-shaped usernames and still-live Google identities can…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthcheck endpoint. Attackers can send a crafted JSON payload with a…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out bypassed the rejection path. A response that two peers can read differently is then stored and served, allowing cache poisoning and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4-alpha.3) contains a missing-authorization vulnerability in the /api/av/getAttributeViewSearchTarget endpoint. The route is registered with CheckAuth only and performs no…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
9,2
0,31 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.