Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to processing a password change request. This makes it possible for…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extract_extra_data(). On system installs, the write happens as root. Two issues combine: `files/extra` is resolved via path operations that follow symlinks, and…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build documentation locally or in a container, a user with write…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'access_privileges' parameter in all versions up to, and including, 8.97.0 due to insufficient escaping on the user supplied parameter and lack of…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to processing a password change request. This makes it possible for…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extract_extra_data(). On system installs, the write happens as root. Two issues combine: `files/extra` is resolved via path operations that follow symlinks, and…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build documentation locally or in a container, a user with write…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,8 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'access_privileges' parameter in all versions up to, and including, 8.97.0 due to insufficient escaping on the user supplied parameter and lack of…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,37 % · rekomendacja wg zapisanej polityki