KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field…
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.…
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing.…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
Nieograniczony upload plików w Cockpit CMS umożliwia wykonanie dowolnych poleceń na serwerze.
Nieodpowiednia implementacja w ANGLE w Google Chrome na Androidzie umożliwia zdalne obejście piaskownicy.
Błąd w CedarJava pozwala na mylenie typów, co może prowadzić do nieautoryzowanego dostępu.
W tinacms przed wersją 3.1.1 wykorzystanie gray-matter umożliwia zdalne wykonanie kodu.
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
Błąd w Orionsec Orion-ops umożliwia zdalne obejście autoryzacji w kontrolerze użytkowników.
Błąd w walidacji archiwów ZIP pozwala atakującemu na zdalne wykonanie kodu.
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret…
Przepełnienie bufora w Zscaler Client Connector na Windows prowadzi do ataku typu denial-of-service.
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an unknown function of the file /user/edit_user/ of the component User Profile Handler. Performing manipulation results in authorization bypass. Remote exploitation of the attack is possible. The exploit is…
W n8n występuje luka umożliwiająca zapis dowolnych plików przez uwierzytelnionego użytkownika.
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.
Brak integralności w pnpm pozwala na dostarczanie złośliwego kodu przez zależności tarball.
A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior authentication. The…
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path length check. Attackers can send a short RequestFileTransfer (SID 0x38) request with filePathAndNameLength 0xFFFC-0xFFFF, causing callbacks…
Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command substitutions placed next to * or ? glob characters. Attackers using indirect prompt injection can craft commands like echo *$(...) that match allowlisted prefixes, executing denied…
A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The…
The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send_test_mail() function, which allows user-controlled PHP code to be written to…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field… |
Obserwuj | 8,8 | 0,48 % | ||
| Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.… |
Obserwuj | 8,8 | 0,48 % | ||
| Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing.… |
Obserwuj | 8,8 | 0,48 % | ||
| Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle… |
Obserwuj | 8,8 | 0,48 % | ||
| Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). | Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise… |
Obserwuj | 8,8 | 0,48 % | ||
| Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). | Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise… |
Obserwuj | 8,8 | 0,48 % | ||
| Nieograniczony upload plików w Cockpit CMS umożliwia wykonanie dowolnych poleceń na serwerze. | Nieograniczony upload plików w Cockpit CMS umożliwia wykonanie dowolnych poleceń na serwerze. |
Obserwuj | 8,8 | 0,48 % | ||
| Nieodpowiednia implementacja w ANGLE w Google Chrome na Androidzie umożliwia zdalne obejście piaskownicy. | Nieodpowiednia implementacja w ANGLE w Google Chrome na Androidzie umożliwia zdalne obejście piaskownicy. |
Obserwuj | 8,8 | 0,48 % | ||
| Błąd w CedarJava pozwala na mylenie typów, co może prowadzić do nieautoryzowanego dostępu. | Błąd w CedarJava pozwala na mylenie typów, co może prowadzić do nieautoryzowanego dostępu. |
Obserwuj | 8,8 | 0,48 % | ||
| W tinacms przed wersją 3.1.1 wykorzystanie gray-matter umożliwia zdalne wykonanie kodu. | W tinacms przed wersją 3.1.1 wykorzystanie gray-matter umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 8,8 | 0,48 % | ||
| IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on… | IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input. |
Obserwuj | 8,8 | 0,48 % | ||
| Błąd w Orionsec Orion-ops umożliwia zdalne obejście autoryzacji w kontrolerze użytkowników. | Błąd w Orionsec Orion-ops umożliwia zdalne obejście autoryzacji w kontrolerze użytkowników. |
W tym tygodniu | 8,8 | 0,48 % | ||
| Błąd w walidacji archiwów ZIP pozwala atakującemu na zdalne wykonanie kodu. | Błąd w walidacji archiwów ZIP pozwala atakującemu na zdalne wykonanie kodu. |
Obserwuj | 8,6 | 1,48 % | ||
| A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to… | A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret… |
Obserwuj | 8,8 | 0,48 % | ||
| Przepełnienie bufora w Zscaler Client Connector na Windows prowadzi do ataku typu denial-of-service. | Przepełnienie bufora w Zscaler Client Connector na Windows prowadzi do ataku typu denial-of-service. |
Obserwuj | 8,8 | 0,48 % | ||
| Use-after-free in the Layout: Text and Fonts component. | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1. |
Obserwuj | 8,8 | 0,48 % | ||
| A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. | A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an unknown function of the file /user/edit_user/ of the component User Profile Handler. Performing manipulation results in authorization bypass. Remote exploitation of the attack is possible. The exploit is… |
W tym tygodniu | 8,8 | 0,48 % | ||
| W n8n występuje luka umożliwiająca zapis dowolnych plików przez uwierzytelnionego użytkownika. | W n8n występuje luka umożliwiająca zapis dowolnych plików przez uwierzytelnionego użytkownika. |
Obserwuj | 8,8 | 0,48 % | ||
| Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. | Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. |
Obserwuj | 8,8 | 0,48 % | ||
| Brak integralności w pnpm pozwala na dostarczanie złośliwego kodu przez zależności tarball. | Brak integralności w pnpm pozwala na dostarczanie złośliwego kodu przez zależności tarball. |
W tym tygodniu | 8,8 | 0,48 % | ||
| A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). | A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior authentication. The… |
Obserwuj | 8,7 | 0,98 % | ||
| Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers… | Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path length check. Attackers can send a short RequestFileTransfer (SID 0x38) request with filePathAndNameLength 0xFFFC-0xFFFF, causing callbacks… |
Obserwuj | 8,8 | 0,47 % | ||
| Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command substitutions placed… | Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command substitutions placed next to * or ? glob characters. Attackers using indirect prompt injection can craft commands like echo *$(...) that match allowlisted prefixes, executing denied… |
W tym tygodniu | 8,8 | 0,47 % | ||
| A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. | A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The… |
W tym tygodniu | 8,8 | 0,47 % | ||
| The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including,… | The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send_test_mail() function, which allows user-controlled PHP code to be written to… |
Obserwuj | 8,8 | 0,47 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.