KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without…
Brak ograniczeń w rate limiting w PasswordPusher umożliwia brutalne ataki na hasła.
Brak pty.spawn w liście niebezpiecznych globalnych w PickleScan umożliwia zdalne wykonanie kodu.
Nieautoryzowane zmiany haseł w phpMyFAQ umożliwiają eskalację uprawnień do SuperAdmina.
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to 2.9.1, rendering an attacker-controlled SVG with a path containing many segments can cause quadratic CPU consumption in cairosvg/path.py. The path tokenizer repeatedly slices and rescans the remaining path data, while…
The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in the authenticated profile self-update handler (processUserProfile(), the update_user task). Unlike the registration handler, this handler does not strip privilege fields ('groups','access') from…
uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console_scripts or gui_scripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories,…
ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode…
An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specifically malformed BGP EVPN multicast update which is attempted to be readvertised to cause an rpd crash.
Brak flagi NC w .htaccess Grav umożliwia dostęp do wrażliwych plików przez atakującego.
Podatność SSRF w Gogs umożliwia atakującemu importowanie wewnętrznych repozytoriów.
Wykorzystanie GitLab Flavored Markdown w GitLab umożliwia uwierzytelnionemu użytkownikowi atak XSS.
Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vulnerability in OnePlus OxygenOS on Android. Any locally installed Android application, with no permissions declared and no user interaction beyond launching it, can execute…
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via…
SiYuan before v3.7.4 contains an incorrect authorization vulnerability in eight publish-mode reader-facing endpoints that filter results using the visibility list instead of the disabled list. Anonymous visitors can discover and read content from documents explicitly marked as forbidden from…
Wstrzyknięcie SQL w DataEase umożliwia atakującym wykonanie złośliwego kodu.
Wstrzyknięcie SQL w DataEase umożliwia atak na DB2, SQL Server i PostgreSQL.
Luka w Craft CMS pozwala na odczyt dowolnych plików przez uwierzytelnionych administratorów.
W DeepCode występuje luka umożliwiająca nieautoryzowanym atakującym odczyt plików przez przejście ścieżki.
A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no explicit administrative grants to overwrite global Zimlet configuration through ConfigureZimletRequest. The uploaded configuration can also add an attacker-controlled domain to the…
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can…
A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS). On SRX4000 Series, and SRX5000 Series with SPC3, and…
A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX. Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. This allows the attacker to escalate their privileges from…
An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or…
A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of service via a specific BGP packet received while a nexthop-ecmp qualifier is attached to a BGP…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Shopper is a Headless e-commerce Admin Panel. | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without… |
Obserwuj | 8,7 | 0,38 % | ||
| Brak ograniczeń w rate limiting w PasswordPusher umożliwia brutalne ataki na hasła. | Brak ograniczeń w rate limiting w PasswordPusher umożliwia brutalne ataki na hasła. |
Obserwuj | 8,7 | 0,38 % | ||
| Brak pty.spawn w liście niebezpiecznych globalnych w PickleScan umożliwia zdalne wykonanie kodu. | Brak pty.spawn w liście niebezpiecznych globalnych w PickleScan umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,7 | 0,38 % | ||
| Nieautoryzowane zmiany haseł w phpMyFAQ umożliwiają eskalację uprawnień do SuperAdmina. | Nieautoryzowane zmiany haseł w phpMyFAQ umożliwiają eskalację uprawnień do SuperAdmina. |
Obserwuj | 8,7 | 0,38 % | ||
| CairoSVG is an SVG converter based on Cairo, a 2D graphics library. | CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to 2.9.1, rendering an attacker-controlled SVG with a path containing many segments can cause quadratic CPU consumption in cairosvg/path.py. The path tokenizer repeatedly slices and rescans the remaining path data, while… |
Obserwuj | 8,7 | 0,38 % | ||
| The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in the authenticated profile self-update… | The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in the authenticated profile self-update handler (processUserProfile(), the update_user task). Unlike the registration handler, this handler does not strip privilege fields ('groups','access') from… |
Obserwuj | 8,7 | 0,38 % | ||
| uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via… | uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console_scripts or gui_scripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories,… |
Obserwuj | 8,7 | 0,38 % | ||
| ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. | ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode… |
Obserwuj | 8,7 | 0,38 % | ||
| An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and… | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specifically malformed BGP EVPN multicast update which is attempted to be readvertised to cause an rpd crash. |
Obserwuj | 8,7 | 0,38 % | ||
| Brak flagi NC w .htaccess Grav umożliwia dostęp do wrażliwych plików przez atakującego. | Brak flagi NC w .htaccess Grav umożliwia dostęp do wrażliwych plików przez atakującego. |
Obserwuj | 8,7 | 0,38 % | ||
| Podatność SSRF w Gogs umożliwia atakującemu importowanie wewnętrznych repozytoriów. | Podatność SSRF w Gogs umożliwia atakującemu importowanie wewnętrznych repozytoriów. |
Obserwuj | 8,7 | 0,38 % | ||
| Wykorzystanie GitLab Flavored Markdown w GitLab umożliwia uwierzytelnionemu użytkownikowi atak XSS. | Wykorzystanie GitLab Flavored Markdown w GitLab umożliwia uwierzytelnionemu użytkownikowi atak XSS. |
Obserwuj | 8,7 | 0,38 % | ||
| Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vulnerability in… | Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vulnerability in OnePlus OxygenOS on Android. Any locally installed Android application, with no permissions declared and no user interaction beyond launching it, can execute… |
Obserwuj | 8,5 | 1,38 % | ||
| Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via… |
Obserwuj | 8,7 | 0,38 % | ||
| SiYuan before v3.7.4 contains an incorrect authorization vulnerability in eight publish-mode reader-facing endpoints that filter results… | SiYuan before v3.7.4 contains an incorrect authorization vulnerability in eight publish-mode reader-facing endpoints that filter results using the visibility list instead of the disabled list. Anonymous visitors can discover and read content from documents explicitly marked as forbidden from… |
Obserwuj | 8,7 | 0,38 % | ||
| Wstrzyknięcie SQL w DataEase umożliwia atakującym wykonanie złośliwego kodu. | Wstrzyknięcie SQL w DataEase umożliwia atakującym wykonanie złośliwego kodu. |
Obserwuj | 8,7 | 0,38 % | ||
| Wstrzyknięcie SQL w DataEase umożliwia atak na DB2, SQL Server i PostgreSQL. | Wstrzyknięcie SQL w DataEase umożliwia atak na DB2, SQL Server i PostgreSQL. |
Obserwuj | 8,7 | 0,38 % | ||
| Luka w Craft CMS pozwala na odczyt dowolnych plików przez uwierzytelnionych administratorów. | Luka w Craft CMS pozwala na odczyt dowolnych plików przez uwierzytelnionych administratorów. |
Obserwuj | 8,7 | 0,38 % | ||
| W DeepCode występuje luka umożliwiająca nieautoryzowanym atakującym odczyt plików przez przejście ścieżki. | W DeepCode występuje luka umożliwiająca nieautoryzowanym atakującym odczyt plików przez przejście ścieżki. |
W tym tygodniu | 8,7 | 0,38 % | ||
| A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no explicit administrative… | A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no explicit administrative grants to overwrite global Zimlet configuration through ConfigureZimletRequest. The uploaded configuration can also add an attacker-controlled domain to the… |
Obserwuj | 8,7 | 0,38 % | ||
| The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret… | The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can… |
Obserwuj | 8,7 | 0,38 % | ||
| A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on… | A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS). On SRX4000 Series, and SRX5000 Series with SPC3, and… |
Obserwuj | 8,7 | 0,37 % | ||
| A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX. | A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX. Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. This allows the attacker to escalate their privileges from… |
Obserwuj | 8,7 | 0,37 % | ||
| An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and… | An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or… |
Obserwuj | 8,7 | 0,37 % | ||
| A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved… | A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of service via a specific BGP packet received while a nexthop-ecmp qualifier is attached to a BGP… |
Obserwuj | 8,7 | 0,37 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.