Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,52 % · rekomendacja wg zapisanej polityki
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.
We have already fixed the vulnerability in the following version:
Video Station 5.8.8 and later
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.
We have already fixed the vulnerability in the following version:
Video Station 5.8.8 and later
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative size parameter (size=-3) is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
mlx5e_xfrm_add_state() handles acquire-flow temporary SAs by allocating
software state and skipping hardware offload setup.
That path jumps to the common success…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the _extract_commands() function of…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the denylist that neutralizes dangerous file uploads (`Helper::$restricted_extensions`) is incomplete: it does not cover the `.pht` extension. The authenticated upload endpoint `POST…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain an SQL Injection vulnerability in the /html/matPat/editar_categoria.php endpoint. The application fails to properly validate and sanitize user inputs in the id_categoria…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
CVSS
8,8
EPSS
0,51 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,52 % · rekomendacja wg zapisanej polityki
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.
We have already fixed the vulnerability in the following version:
Video Station 5.8.8 and later
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.
We have already fixed the vulnerability in the following version:
Video Station 5.8.8 and later
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative size parameter (size=-3) is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
mlx5e_xfrm_add_state() handles acquire-flow temporary SAs by allocating
software state and skipping hardware offload setup.
That path jumps to the common success…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the _extract_commands() function of…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the denylist that neutralizes dangerous file uploads (`Helper::$restricted_extensions`) is incomplete: it does not cover the `.pht` extension. The authenticated upload endpoint `POST…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain an SQL Injection vulnerability in the /html/matPat/editar_categoria.php endpoint. The application fails to properly validate and sanitize user inputs in the id_categoria…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
8,8
0,51 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.