Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication. Attackers can send SOAP requests to /jaxrpc/* with an unverified session identifier and a chosen…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
A vulnerability was found in Yalantis uCrop 2.2.11. Affected by this issue is the function downloadFile of the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. The…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference (IDOR) vulnerability in the FileBrowser application's share deletion functionality.…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication. Attackers can send SOAP requests to /jaxrpc/* with an unverified session identifier and a chosen…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
A vulnerability was found in Yalantis uCrop 2.2.11. Affected by this issue is the function downloadFile of the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. The…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference (IDOR) vulnerability in the FileBrowser application's share deletion functionality.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki