Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/{id} or the knowledgebaseId parameter of…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Cap-go capgo (capgo-backend) before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising from the audit_logs table's Row-Level Security (RLS) policy when accessed via the Supabase PostgREST API. Because the PostgreSQL query planner executes costly logic before RLS…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL by supplying a crafted num path parameter to /WebResource/findresourcebynum. Attackers can append SQL after the LIMIT clause concatenated via QueryWrapper.last() to extract…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebArticle/findarticlesbynum. Attackers can append crafted SQL after the LIMIT clause concatenated into a MyBatis-Plus QueryWrapper to extract…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerability in administrative image fields. Editor-role users can upload PHP scripts via the page_image or cat_image parameters to the web-accessible /public/image…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Console is a network used to control Gorilla Tag mods' users and other users on the network. Prior to version 2.8.0, a path traversal vulnerability exists where complicated combinations of backslashes and periods can be used to escape the Gorilla Tag path and write to unwanted directories. This…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document can craft an enum entry that closes the const block in…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNemotronVLImageProcessor. Remote attackers can submit small, highly compressed images with huge dimensions to the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a session. Attackers can repeatedly send multipart requests with unlimited file parts to /upload, persisting files in…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution before applying max_pixels limits. Remote attackers can submit high-resolution videos to /v1/chat/completions on Qwen-VL deployments, and…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in `MessageBuffer::computeRequiredCapacity()` causes the receiving…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to control multimodal processor parameters by supplying per-request mm_processor_kwargs. Attackers can set large image size, patch count, crop count, or frame count values in Isaac,…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rate…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/{id} or the knowledgebaseId parameter of…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Cap-go capgo (capgo-backend) before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising from the audit_logs table's Row-Level Security (RLS) policy when accessed via the Supabase PostgREST API. Because the PostgreSQL query planner executes costly logic before RLS…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL by supplying a crafted num path parameter to /WebResource/findresourcebynum. Attackers can append SQL after the LIMIT clause concatenated via QueryWrapper.last() to extract…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebArticle/findarticlesbynum. Attackers can append crafted SQL after the LIMIT clause concatenated into a MyBatis-Plus QueryWrapper to extract…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerability in administrative image fields. Editor-role users can upload PHP scripts via the page_image or cat_image parameters to the web-accessible /public/image…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Console is a network used to control Gorilla Tag mods' users and other users on the network. Prior to version 2.8.0, a path traversal vulnerability exists where complicated combinations of backslashes and periods can be used to escape the Gorilla Tag path and write to unwanted directories. This…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document can craft an enum entry that closes the const block in…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNemotronVLImageProcessor. Remote attackers can submit small, highly compressed images with huge dimensions to the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a session. Attackers can repeatedly send multipart requests with unlimited file parts to /upload, persisting files in…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution before applying max_pixels limits. Remote attackers can submit high-resolution videos to /v1/chat/completions on Qwen-VL deployments, and…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in `MessageBuffer::computeRequiredCapacity()` causes the receiving…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to control multimodal processor parameters by supplying per-request mm_processor_kwargs. Attackers can set large image size, patch count, crop count, or frame count values in Isaac,…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rate…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki