Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently re-advertised.
This issue does not affect…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause a denial of service via EVPN multihoming with preference-based designated-forwarder election.
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when the l2vpn-evpn RIB telemetry sensor is…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause rpd crash via malformed BGP MCAST-VPN updates from a configured eBGP peer.
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service. A manual power cycle is required to recover the device.
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled `_size`, `_paddingSize`, and `_dataOffset` fields during `DataDescriptor` message deserialization. An unauthenticated remote attacker can send a crafted network…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, parseUserInformation in src/mms/iso_acse/acse.c checks len for zero before validating the negative bufPos returned by BerDecoder_decodeLength…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response. The issue affects DHCP client operation and can interrupt related DHCP, relay, and…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR arrays, maps, and tags through _decodeValue() without enforcing a maximum nesting depth. A sufficiently deep structure exhausts the JavaScript call…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawString. Attackers with RemoteRelays station permission can inject nested Liquidsoap interpolation syntax to execute…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel user.
A non-admin user with only accessCp can place newline characters in X-Craft-Plugin-Licenses. Craft passes this value to its .env writer without removing the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed column filter delegates property lookup to Yii ArrayHelper, outside Twig’s SecurityPolicy. Repeated single-segment…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers (get/put/delete/post). API keys created with mode=all but restricted to a single app via limited_to_apps are only checked for limited_to_orgs and not for limited_to_apps, so an app-scoped…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently re-advertised.
This issue does not affect…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause a denial of service via EVPN multihoming with preference-based designated-forwarder election.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when the l2vpn-evpn RIB telemetry sensor is…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause rpd crash via malformed BGP MCAST-VPN updates from a configured eBGP peer.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service. A manual power cycle is required to recover the device.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled `_size`, `_paddingSize`, and `_dataOffset` fields during `DataDescriptor` message deserialization. An unauthenticated remote attacker can send a crafted network…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, parseUserInformation in src/mms/iso_acse/acse.c checks len for zero before validating the negative bufPos returned by BerDecoder_decodeLength…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response. The issue affects DHCP client operation and can interrupt related DHCP, relay, and…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR arrays, maps, and tags through _decodeValue() without enforcing a maximum nesting depth. A sufficiently deep structure exhausts the JavaScript call…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawString. Attackers with RemoteRelays station permission can inject nested Liquidsoap interpolation syntax to execute…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel user.
A non-admin user with only accessCp can place newline characters in X-Craft-Plugin-Licenses. Craft passes this value to its .env writer without removing the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed column filter delegates property lookup to Yii ArrayHelper, outside Twig’s SecurityPolicy. Repeated single-segment…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers (get/put/delete/post). API keys created with mode=all but restricted to a single app via limited_to_apps are only checked for limited_to_orgs and not for limited_to_apps, so an app-scoped…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki