KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcp_server_dash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the…
Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the public_url guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and…
Under certain circumstances, attacker can capture the network key, read or write encrypted packets on the PowerG network.
Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group memberships just revoked in the identity provider. When overlapping refreshes for the same user commit out of order, stale memberships are persisted and the user…
Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is issued. Users can keep their APIKey cookie active through regular use, extending it every 24 hours to access Coder indefinitely…
zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url,…
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their event_id to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume…
Nieprawidłowa walidacja certyfikatów w aplikacji ECOVACS PRO umożliwia przechwycenie i modyfikację komunikacji.
Wstrzyknięcie poleceń w libvirt umożliwia zdalne wykonanie kodu jako root.
Luka w PeopleSoft Enterprise FIN eSettlements pozwala na nieautoryzowany dostęp do danych.
In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation.
Brak weryfikacji certyfikatu w DEEBOT PRO M1 i K1VAC umożliwia atak typu man-in-the-middle.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to…
Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can get a gitify://oauth?code= link with their own authorization code…
Malleabilność JWT w joserfc umożliwia obejście ochrony przed powtórnym użyciem tokenów.
Błąd w MongoDB Server umożliwia nieautoryzowaną autoryzację mimo ograniczeń administratora.
CSRF w pluginie Grav umożliwia atakującemu wymuszenie ponownej rejestracji 2FA użytkownika.
FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream_New that allows malicious RDP servers to trigger invalid memory reads via short clipboard responses. Attackers can answer a FILECONTENTS_SIZE request with a cbRequested of fewer…
PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks' discovery rooms by supplying a forged cf-connecting-ip header. Attackers who know a victim's public IP can appear as a local device on self-hosted instances not behind…
Nieprawidłowa walidacja certyfikatu w aplikacji 'デジラアプリ' na iOS umożliwia atak typu man-in-the-middle.
SiYuan versions before 3.7.4 contain a cross-site request forgery vulnerability in the session-cookie authentication branch of CheckAuth() that lacks Origin/Referer validation and sets no explicit SameSite attribute on session cookies. Attackers can craft malicious web pages that perform…
Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page…
Luka w Dell PowerProtect Data Domain umożliwia lokalnemu atakującemu ujawnienie informacji.
Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into attacker-controlled accounts because the OpenID Connect callback never validates the OAuth state parameter. Attackers can induce a victim's browser to load…
Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy (edu) from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| The Dash MCP server bound its listener to the loopback address but never checked the host a request named. | The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcp_server_dash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the… |
Do wiadomości | 2,3 | 0,18 % | ||
| Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the… | Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the public_url guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and… |
Do wiadomości | 2,3 | 0,18 % | ||
| Under certain circumstances, attacker can capture the network key, read or write encrypted packets on the PowerG network. | Under certain circumstances, attacker can capture the network key, read or write encrypted packets on the PowerG network. |
Do wiadomości | 2,3 | 0,18 % | ||
| Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group… | Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group memberships just revoked in the identity provider. When overlapping refreshes for the same user commit out of order, stale memberships are persisted and the user… |
Do wiadomości | 2,3 | 0,18 % | ||
| Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token… | Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is issued. Users can keep their APIKey cookie active through regular use, extending it every 24 hours to access Coder indefinitely… |
Do wiadomości | 2,3 | 0,18 % | ||
| zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services… | zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url,… |
Do wiadomości | 2,3 | 0,18 % | ||
| iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to… | iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their event_id to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume… |
Do wiadomości | 2,3 | 0,17 % | ||
| Nieprawidłowa walidacja certyfikatów w aplikacji ECOVACS PRO umożliwia przechwycenie i modyfikację komunikacji. | Nieprawidłowa walidacja certyfikatów w aplikacji ECOVACS PRO umożliwia przechwycenie i modyfikację komunikacji. |
Do wiadomości | 2,3 | 0,17 % | ||
| Wstrzyknięcie poleceń w libvirt umożliwia zdalne wykonanie kodu jako root. | Wstrzyknięcie poleceń w libvirt umożliwia zdalne wykonanie kodu jako root. |
Do wiadomości | 2,3 | 0,16 % | ||
| Luka w PeopleSoft Enterprise FIN eSettlements pozwala na nieautoryzowany dostęp do danych. | Luka w PeopleSoft Enterprise FIN eSettlements pozwala na nieautoryzowany dostęp do danych. |
Do wiadomości | 2,3 | 0,16 % | ||
| In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an… | In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation. |
Do wiadomości | 2,3 | 0,15 % | ||
| Brak weryfikacji certyfikatu w DEEBOT PRO M1 i K1VAC umożliwia atak typu man-in-the-middle. | Brak weryfikacji certyfikatu w DEEBOT PRO M1 i K1VAC umożliwia atak typu man-in-the-middle. |
Do wiadomości | 2,3 | 0,15 % | ||
| Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to… |
Do wiadomości | 2,3 | 0,15 % | ||
| Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to… | Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can get a gitify://oauth?code= link with their own authorization code… |
Do wiadomości | 2,3 | 0,15 % | ||
| Malleabilność JWT w joserfc umożliwia obejście ochrony przed powtórnym użyciem tokenów. | Malleabilność JWT w joserfc umożliwia obejście ochrony przed powtórnym użyciem tokenów. |
Do wiadomości | 2,3 | 0,15 % | ||
| Błąd w MongoDB Server umożliwia nieautoryzowaną autoryzację mimo ograniczeń administratora. | Błąd w MongoDB Server umożliwia nieautoryzowaną autoryzację mimo ograniczeń administratora. |
Do wiadomości | 2,3 | 0,14 % | ||
| CSRF w pluginie Grav umożliwia atakującemu wymuszenie ponownej rejestracji 2FA użytkownika. | CSRF w pluginie Grav umożliwia atakującemu wymuszenie ponownej rejestracji 2FA użytkownika. |
Do wiadomości | 2,3 | 0,14 % | ||
| FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream_New that allows… | FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream_New that allows malicious RDP servers to trigger invalid memory reads via short clipboard responses. Attackers can answer a FILECONTENTS_SIZE request with a cbRequested of fewer… |
Do wiadomości | 2,3 | 0,14 % | ||
| PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks'… | PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks' discovery rooms by supplying a forged cf-connecting-ip header. Attackers who know a victim's public IP can appear as a local device on self-hosted instances not behind… |
Do wiadomości | 2,3 | 0,14 % | ||
| Nieprawidłowa walidacja certyfikatu w aplikacji 'デジラアプリ' na iOS umożliwia atak typu man-in-the-middle. | Nieprawidłowa walidacja certyfikatu w aplikacji 'デジラアプリ' na iOS umożliwia atak typu man-in-the-middle. |
Do wiadomości | 2,3 | 0,13 % | ||
| SiYuan versions before 3.7.4 contain a cross-site request forgery vulnerability in the session-cookie authentication branch of CheckAuth()… | SiYuan versions before 3.7.4 contain a cross-site request forgery vulnerability in the session-cookie authentication branch of CheckAuth() that lacks Origin/Referer validation and sets no explicit SameSite attribute on session cookies. Attackers can craft malicious web pages that perform… |
Do wiadomości | 2,3 | 0,13 % | ||
| Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts… | Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page… |
Do wiadomości | 2,3 | 0,12 % | ||
| Luka w Dell PowerProtect Data Domain umożliwia lokalnemu atakującemu ujawnienie informacji. | Luka w Dell PowerProtect Data Domain umożliwia lokalnemu atakującemu ujawnienie informacji. |
Do wiadomości | 2,3 | 0,12 % | ||
| Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into… | Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into attacker-controlled accounts because the OpenID Connect callback never validates the OAuth state parameter. Attackers can induce a victim's browser to load… |
Do wiadomości | 2,3 | 0,11 % | ||
| Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy (edu) from commit… | Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy (edu) from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify… |
Do wiadomości | 2,3 | 0,11 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.