Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback REMOTE_ADDR values. Unauthenticated attackers behind a same-host HTTP proxy can read profiler records exposing system and plugin configuration, secrets, request metadata,…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling. The server evaluates request URIs using an unsanitized SQLite query against the FileLinks table in gateway.db. By injecting SQL through the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because users/verify-email does not invalidate them for active users. Attackers who obtain a victim's emailed code can submit it to users/set-password after the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). The loop over the ports never advanced to the next port, so the request never completes and the device stops responding. A remote unauthenticated attacker can use…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into downloading a crafted model repository…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `MemoryMerkleAir` does not forbid Merkle expansion rows at `parent_height` = 0 or below while `expand_direction` != 0. A malicious…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or object UUID, and does not start a timeout for it. Repeated requests with different activity UUIDs exhaust the available sessions. Once they are exhausted the device no longer answers…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID for a record index that requires an AR (AR specific indices 0xE000-0xEFFF, and the expected identification data of a slot or subslot). A remote unauthenticated attacker can send…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request without a valid target AR UUID for a user specific record index, if the application has registered a read callback. A remote unauthenticated attacker can send such a request to crash…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3 API accepts an external OIDC JWT sent directly in the Authorization header and maps it to an IAM role without enforcing that role's trust policy, so a federated user can assume a role they are not…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before version 25.12.3, odhcpd's DHCPv6 IA parser accepts an IA_NA or IA_PD option whose body is shorter than struct dhcpv6_ia_hdr, casts the option header to that full structure, and reads…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
CVSS
8,7
EPSS
0,4 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback REMOTE_ADDR values. Unauthenticated attackers behind a same-host HTTP proxy can read profiler records exposing system and plugin configuration, secrets, request metadata,…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling. The server evaluates request URIs using an unsanitized SQLite query against the FileLinks table in gateway.db. By injecting SQL through the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because users/verify-email does not invalidate them for active users. Attackers who obtain a victim's emailed code can submit it to users/set-password after the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). The loop over the ports never advanced to the next port, so the request never completes and the device stops responding. A remote unauthenticated attacker can use…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into downloading a crafted model repository…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `MemoryMerkleAir` does not forbid Merkle expansion rows at `parent_height` = 0 or below while `expand_direction` != 0. A malicious…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or object UUID, and does not start a timeout for it. Repeated requests with different activity UUIDs exhaust the available sessions. Once they are exhausted the device no longer answers…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID for a record index that requires an AR (AR specific indices 0xE000-0xEFFF, and the expected identification data of a slot or subslot). A remote unauthenticated attacker can send…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request without a valid target AR UUID for a user specific record index, if the application has registered a read callback. A remote unauthenticated attacker can send such a request to crash…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3 API accepts an external OIDC JWT sent directly in the Authorization header and maps it to an IAM role without enforcing that role's trust policy, so a federated user can assume a role they are not…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before version 25.12.3, odhcpd's DHCPv6 IA parser accepts an IA_NA or IA_PD option whose body is shorter than struct dhcpv6_ia_hdr, casts the option header to that full structure, and reads…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
8,7
0,4 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.