KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the regular expression returned by router.matchers.slug() contains adjacent greedy repetitions with overlapping character classes. When an application applies this matcher to an…
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split() parsed header values with a pattern whose token alternative also matched whitespace, followed by a (?<!\s) lookbehind. A run…
league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,…
Brak sanitizacji HTML w lakeFS umożliwia wykonanie złośliwego kodu przez użytkowników z dostępem do repozytoriów.
Luka masowego przypisania w Quark Drive pozwala atakującym na przejęcie uprawnień administratora.
Obejście uwierzytelnienia w routerach BUFFALO umożliwia zmianę ustawień konfiguracyjnych bez autoryzacji.
pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to execute commands as root via crafted usernames. Attackers authenticated through RADIUS or LDAP can use usernames containing single quotes…
The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible for authenticated attackers, with Administrator-level access and…
Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that allows unauthenticated attackers to crash the service by sending a zero-length handshake frame. Attackers can connect to the handshake port listening on all…
Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers can send repeated requests with limit=0 to bypass the SQL…
Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL executed by the application. This issue is fixed in version…
Nieskończona pętla w facil.io przy przetwarzaniu zagnieżdżonego JSON-u prowadzi do wysokiego obciążenia CPU.
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an order_id. Attackers can iterate the order_id parameter, which matches guest orders stored with…
Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks. Attackers with external client permissions on one network can send PUT requests to…
A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following…
A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and…
Wstrzyknięcie NoSQL w Budibase Server umożliwia modyfikację zapytań MongoDB przez atakujących.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. While…
Obejście uwierzytelnienia w Crabbox umożliwia podszywanie się pod innych użytkowników.
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionality…
Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header they strip, so a request carrying many such headers makes the proxy write far more log data than the request contains. This issue affects Apache Traffic Server: 9.2.15, 10.1.4,…
FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token…
SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and authenticate with its bearer token to gain administrative control over all users…
Luka ujawnienia informacji w Capgo pozwala nieautoryzowanym atakującym na enumerację organizacji.
Denial of service w shell-quote umożliwia zablokowanie pętli zdarzeń Node.js przez atakującego.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. | AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the regular expression returned by router.matchers.slug() contains adjacent greedy repetitions with overlapping character classes. When an application applies this matcher to an… |
Obserwuj | 8,7 | 0,37 % | ||
| Symfony is a PHP framework for web and console applications and a set of reusable PHP components. | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split() parsed header values with a pattern whose token alternative also matched whitespace, followed by a (?<!\s) lookbehind. A run… |
Obserwuj | 8,7 | 0,37 % | ||
| league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table… | league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,… |
Obserwuj | 8,7 | 0,37 % | ||
| Brak sanitizacji HTML w lakeFS umożliwia wykonanie złośliwego kodu przez użytkowników z dostępem do repozytoriów. | Brak sanitizacji HTML w lakeFS umożliwia wykonanie złośliwego kodu przez użytkowników z dostępem do repozytoriów. |
Obserwuj | 8,7 | 0,37 % | ||
| Luka masowego przypisania w Quark Drive pozwala atakującym na przejęcie uprawnień administratora. | Luka masowego przypisania w Quark Drive pozwala atakującym na przejęcie uprawnień administratora. |
Obserwuj | 8,7 | 0,37 % | ||
| Obejście uwierzytelnienia w routerach BUFFALO umożliwia zmianę ustawień konfiguracyjnych bez autoryzacji. | Obejście uwierzytelnienia w routerach BUFFALO umożliwia zmianę ustawień konfiguracyjnych bez autoryzacji. |
Obserwuj | 8,7 | 0,37 % | ||
| pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows… | pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to execute commands as root via crafted usernames. Attackers authenticated through RADIUS or LDAP can use usernames containing single quotes… |
Obserwuj | 7,7 | 5,37 % | ||
| The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. | The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible for authenticated attackers, with Administrator-level access and… |
Obserwuj | 8,7 | 0,37 % | ||
| Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that… | Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that allows unauthenticated attackers to crash the service by sending a zero-length handshake frame. Attackers can connect to the handshake port listening on all… |
Obserwuj | 8,7 | 0,37 % | ||
| Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to… | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers can send repeated requests with limit=0 to bypass the SQL… |
Obserwuj | 8,7 | 0,37 % | ||
| Frappe is a full-stack web application framework. | Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL executed by the application. This issue is fixed in version… |
Obserwuj | 8,7 | 0,37 % | ||
| Nieskończona pętla w facil.io przy przetwarzaniu zagnieżdżonego JSON-u prowadzi do wysokiego obciążenia CPU. | Nieskończona pętla w facil.io przy przetwarzaniu zagnieżdżonego JSON-u prowadzi do wysokiego obciążenia CPU. |
Obserwuj | 8,7 | 0,37 % | ||
| NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows… | NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an order_id. Attackers can iterate the order_id parameter, which matches guest orders stored with… |
Obserwuj | 8,7 | 0,36 % | ||
| Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to… | Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks. Attackers with external client permissions on one network can send PUT requests to… |
Obserwuj | 8,7 | 0,36 % | ||
| A relative path traversal vulnerability has been reported to affect Download Station. | A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following… |
Obserwuj | 8,7 | 0,36 % | ||
| A path traversal vulnerability has been reported to affect QcalAgent. | A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and… |
Obserwuj | 8,7 | 0,36 % | ||
| Wstrzyknięcie NoSQL w Budibase Server umożliwia modyfikację zapytań MongoDB przez atakujących. | Wstrzyknięcie NoSQL w Budibase Server umożliwia modyfikację zapytań MongoDB przez atakujących. |
Obserwuj | 8,7 | 0,36 % | ||
| Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. While… |
Obserwuj | 8,7 | 0,36 % | ||
| Obejście uwierzytelnienia w Crabbox umożliwia podszywanie się pod innych użytkowników. | Obejście uwierzytelnienia w Crabbox umożliwia podszywanie się pod innych użytkowników. |
Obserwuj | 8,7 | 0,36 % | ||
| An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic… | An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionality… |
Obserwuj | 8,7 | 0,36 % | ||
| Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header they strip, so a… | Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header they strip, so a request carrying many such headers makes the proxy write far more log data than the request contains. This issue affects Apache Traffic Server: 9.2.15, 10.1.4,… |
Obserwuj | 8,7 | 0,36 % | ||
| FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to… | FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token… |
Obserwuj | 8,7 | 0,36 % | ||
| SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. | SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and authenticate with its bearer token to gain administrative control over all users… |
Obserwuj | 8,7 | 0,36 % | ||
| Luka ujawnienia informacji w Capgo pozwala nieautoryzowanym atakującym na enumerację organizacji. | Luka ujawnienia informacji w Capgo pozwala nieautoryzowanym atakującym na enumerację organizacji. |
Obserwuj | 8,7 | 0,36 % | ||
| Denial of service w shell-quote umożliwia zablokowanie pętli zdarzeń Node.js przez atakującego. | Denial of service w shell-quote umożliwia zablokowanie pętli zdarzeń Node.js przez atakującego. |
Obserwuj | 8,7 | 0,36 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.