KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Eskalacja uprawnień w OpenZiti pozwala na uzyskanie pełnej kontroli administracyjnej.
Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allows a specially crafted sequence of symlinks to redirect file writes outside the intended extraction prefix. Attackers can publish a malicious sdist that, when installed by a…
Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch repeated extglob patterns. Attackers can provide globs like +(*) or +(*a), which analyzeRepeatedExtglob in lib/parse.js skips, causing…
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On MX Series with SPC3 line-card and source NAT…
PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the server.
Błąd w PocketMine-MP powoduje awarię serwera przy nieprawidłowych danych JSON dotyczących skóry.
Błąd walidacji w bibliotece IPsec w Junos OS umożliwia zdalne wywołanie DoS.
The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to before version 2.1.48, the WooCommerce purchase event tracking mechanism allows an unauthenticated attacker to trigger the rendering of another customer's full order data — including…
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta,…
SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the dailyNoteSavePath parameter is concatenated into SQL without escaping. Unauthenticated attackers on published sites with auth disabled can inject SQL via UNION SELECT to extract arbitrary database…
Błąd w Scriban umożliwia atakującym wywołanie StackOverflowException przez głębokie zagnieżdżenie wyrażeń.
stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can host malicious SVGs with extremely large width and height values and trigger concurrent requests to exhaust available memory…
Luka ujawnienia informacji w phpMyFAQ pozwala nieautoryzowanym na dostęp do zastrzeżonych FAQ.
Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to the upstream without removing the client's Connection header, other hop-by-hop headers, or the headers Connection nominated, although RFC 9110…
Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which…
Podwójne zwolnienie pamięci w FFmpeg umożliwia atakującym wywołanie uszkodzenia pamięci.
Niewystarczająca walidacja wejścia w LabOne Web Server umożliwia odczytanie dowolnych plików.
An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service.
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable…
A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The device enters a fault state; after a reset, a second packet can leave it permanently unresponsive until a manual power cycle is performed.
Nadmierne zużycie CPU w sqlparse umożliwia ataki DoS przez złożone zapytania SQL.
Podatność XSS w Adobe Commerce pozwala atakującym na wstrzykiwanie złośliwych skryptów.
Luka w Oracle WebCenter Content pozwala na nieautoryzowane modyfikacje danych przez atakującego.
boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The Node-RED Admin API allows deploying flows that can execute arbitrary system commands. An unauthenticated attacker on the local network can deploy a malicious flow to achieve…
Luka w Spring Cloud Gateway umożliwia zdalne wczytywanie niebezpiecznych zasobów.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Eskalacja uprawnień w OpenZiti pozwala na uzyskanie pełnej kontroli administracyjnej. | Eskalacja uprawnień w OpenZiti pozwala na uzyskanie pełnej kontroli administracyjnej. |
Obserwuj | 8,7 | 0,34 % | ||
| Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allows a specially… | Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allows a specially crafted sequence of symlinks to redirect file writes outside the intended extraction prefix. Attackers can publish a malicious sdist that, when installed by a… |
Obserwuj | 8,7 | 0,34 % | ||
| Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by… | Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch repeated extglob patterns. Attackers can provide globs like +(*) or +(*a), which analyzeRepeatedExtglob in lib/parse.js skips, causing… |
Obserwuj | 8,7 | 0,34 % | ||
| An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS… | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On MX Series with SPC3 line-card and source NAT… |
Obserwuj | 8,7 | 0,34 % | ||
| PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null… | PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the server. |
Obserwuj | 8,7 | 0,34 % | ||
| Błąd w PocketMine-MP powoduje awarię serwera przy nieprawidłowych danych JSON dotyczących skóry. | Błąd w PocketMine-MP powoduje awarię serwera przy nieprawidłowych danych JSON dotyczących skóry. |
Obserwuj | 8,7 | 0,34 % | ||
| Błąd walidacji w bibliotece IPsec w Junos OS umożliwia zdalne wywołanie DoS. | Błąd walidacji w bibliotece IPsec w Junos OS umożliwia zdalne wywołanie DoS. |
Obserwuj | 8,7 | 0,34 % | ||
| The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. | The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to before version 2.1.48, the WooCommerce purchase event tracking mechanism allows an unauthenticated attacker to trigger the rendering of another customer's full order data — including… |
Obserwuj | 8,7 | 0,34 % | ||
| Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to… | Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta,… |
Obserwuj | 8,7 | 0,34 % | ||
| SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the dailyNoteSavePath parameter is… | SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the dailyNoteSavePath parameter is concatenated into SQL without escaping. Unauthenticated attackers on published sites with auth disabled can inject SQL via UNION SELECT to extract arbitrary database… |
Obserwuj | 8,7 | 0,34 % | ||
| Błąd w Scriban umożliwia atakującym wywołanie StackOverflowException przez głębokie zagnieżdżenie wyrażeń. | Błąd w Scriban umożliwia atakującym wywołanie StackOverflowException przez głębokie zagnieżdżenie wyrażeń. |
Obserwuj | 8,7 | 0,34 % | ||
| stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by… | stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can host malicious SVGs with extremely large width and height values and trigger concurrent requests to exhaust available memory… |
Obserwuj | 8,7 | 0,34 % | ||
| Luka ujawnienia informacji w phpMyFAQ pozwala nieautoryzowanym na dostęp do zastrzeżonych FAQ. | Luka ujawnienia informacji w phpMyFAQ pozwala nieautoryzowanym na dostęp do zastrzeżonych FAQ. |
Obserwuj | 8,7 | 0,34 % | ||
| Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter… | Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to the upstream without removing the client's Connection header, other hop-by-hop headers, or the headers Connection nominated, although RFC 9110… |
Obserwuj | 8,7 | 0,34 % | ||
| Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA… | Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which… |
Obserwuj | 8,7 | 0,34 % | ||
| Podwójne zwolnienie pamięci w FFmpeg umożliwia atakującym wywołanie uszkodzenia pamięci. | Podwójne zwolnienie pamięci w FFmpeg umożliwia atakującym wywołanie uszkodzenia pamięci. |
Obserwuj | 8,7 | 0,34 % | ||
| Niewystarczająca walidacja wejścia w LabOne Web Server umożliwia odczytanie dowolnych plików. | Niewystarczająca walidacja wejścia w LabOne Web Server umożliwia odczytanie dowolnych plików. |
Obserwuj | 8,7 | 0,34 % | ||
| An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to… | An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service. |
Obserwuj | 8,7 | 0,33 % | ||
| compress provides various compression algorithms. | compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable… |
Obserwuj | 8,7 | 0,33 % | ||
| A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The device enters a fault… | A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The device enters a fault state; after a reset, a second packet can leave it permanently unresponsive until a manual power cycle is performed. |
Obserwuj | 8,7 | 0,33 % | ||
| Nadmierne zużycie CPU w sqlparse umożliwia ataki DoS przez złożone zapytania SQL. | Nadmierne zużycie CPU w sqlparse umożliwia ataki DoS przez złożone zapytania SQL. |
Obserwuj | 8,7 | 0,33 % | ||
| Podatność XSS w Adobe Commerce pozwala atakującym na wstrzykiwanie złośliwych skryptów. | Podatność XSS w Adobe Commerce pozwala atakującym na wstrzykiwanie złośliwych skryptów. |
Obserwuj | 8,7 | 0,33 % | ||
| Luka w Oracle WebCenter Content pozwala na nieautoryzowane modyfikacje danych przez atakującego. | Luka w Oracle WebCenter Content pozwala na nieautoryzowane modyfikacje danych przez atakującego. |
Obserwuj | 8,7 | 0,33 % | ||
| boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. | boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The Node-RED Admin API allows deploying flows that can execute arbitrary system commands. An unauthenticated attacker on the local network can deploy a malicious flow to achieve… |
W tym tygodniu | 8,7 | 0,33 % | ||
| Luka w Spring Cloud Gateway umożliwia zdalne wczytywanie niebezpiecznych zasobów. | Luka w Spring Cloud Gateway umożliwia zdalne wczytywanie niebezpiecznych zasobów. |
Obserwuj | 8,7 | 0,33 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.