Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenant_id and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html through Issue.objects.create(...) without calling validate_html_content from nh3. Any authenticated user, including a new user with no workspace memberships, can…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted string of repeated backslash escapes in…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quotes or other special characters. The…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,86 % · rekomendacja wg zapisanej polityki
In egroupware version 26.0 and earlier, an authenticated administrator can achieve OS-level Remote Code Execution (RCE) by uploading a malicious eTemplate XML file (`.xet`) to the VFS `/etemplates` mount. The `Widget::expand_name()` method passes template widget attribute values directly into a…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,86 % · rekomendacja wg zapisanej polityki
A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or automatic certificate re-enrollment.
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows authenticated tenant users to access the platform management API in multi-tenant mode. Attackers can reuse a tenant login JWT against /platformapi controllers to create platform…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize() that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic preg_replace…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_compact_form() that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long search terms with many distinct in:(...) or has:(...) expressions…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,85 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,85 % · rekomendacja wg zapisanej polityki
Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and responds with Access-Control-Allow-Origin: *, allowing unauthenticated attackers to make fully authenticated cross-origin API requests from any malicious website. Attackers who obtain a leaked JWT token…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks require…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
CVSS
8,7
EPSS
0,35 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenant_id and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html through Issue.objects.create(...) without calling validate_html_content from nh3. Any authenticated user, including a new user with no workspace memberships, can…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted string of repeated backslash escapes in…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quotes or other special characters. The…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,86 % · rekomendacja wg zapisanej polityki
In egroupware version 26.0 and earlier, an authenticated administrator can achieve OS-level Remote Code Execution (RCE) by uploading a malicious eTemplate XML file (`.xet`) to the VFS `/etemplates` mount. The `Widget::expand_name()` method passes template widget attribute values directly into a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,86 % · rekomendacja wg zapisanej polityki
A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or automatic certificate re-enrollment.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows authenticated tenant users to access the platform management API in multi-tenant mode. Attackers can reuse a tenant login JWT against /platformapi controllers to create platform…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize() that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic preg_replace…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_compact_form() that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long search terms with many distinct in:(...) or has:(...) expressions…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,85 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,85 % · rekomendacja wg zapisanej polityki
Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and responds with Access-Control-Allow-Origin: *, allowing unauthenticated attackers to make fully authenticated cross-origin API requests from any malicious website. Attackers who obtain a leaked JWT token…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks require…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
8,7
0,35 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.