KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Wykorzystanie podatności w deco-cx umożliwia zdalne przeprowadzenie ataku typu server-side request forgery.
Wstrzyknięcie kodu w ChenJinchuang Lin-CMS-TP5 umożliwia zdalne wykonanie kodu.
Wstrzyknięcie skryptów w winston-dsouza Ecommerce-Website umożliwia zdalne ataki XSS.
A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_model.py of the component Inference Model Handler. The manipulation of the argument _target_ results in deserialization. It is possible to launch the attack…
Wstrzyknięcie SQL w Student-Registration-System umożliwia zdalne wykonanie ataku.
Wstrzyknięcie SQL w core-php-admin-panel umożliwia zdalne wykonanie kodu.
Wstrzyknięcie SQL w cemtan sar2html umożliwia zdalne ataki na bazę danych.
A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The impacted element is the function OrderItem.asc/OrderItem.desc of the file /api/system/sys/dept/page of the component com.zs.sys.dept.controller.SysDeptController. This manipulation of the…
Wstrzyknięcie SQL w IceHRM umożliwia zdalne wykonanie ataku przez manipulację argumentem employeeList.
A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released to…
A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function get_class_from_dynamic_module of the file examples/chat_gradio_no_merge.py of the component Adapter Config. The manipulation of the argument…
A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend/parser/api/dataimport/Swagger3ParserApiDefinition.java of the component Swagger3 Parser. Performing a manipulation of the…
A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address…
A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of the component Penalty Handler. Performing a manipulation results in denial of service. Remote exploitation of the attack…
A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed…
Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.AuthorizationCallback module) allows an attacker to make a victim's browser complete an authorization flow the victim never initiated. This vulnerability is associated with program file…
A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made…
A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack…
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The…
A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection.…
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack…
A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manipulation of the argument user/tempUser can lead to dynamically-determined object attributes. The attack can be executed…
A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor…
Nieprawidłowe kontrole dostępu w youlaitech youlai-mall umożliwiają zdalne ataki.
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Wykorzystanie podatności w deco-cx umożliwia zdalne przeprowadzenie ataku typu server-side request forgery. | Wykorzystanie podatności w deco-cx umożliwia zdalne przeprowadzenie ataku typu server-side request forgery. |
Do wiadomości | 2,1 | 0,32 % | ||
| Wstrzyknięcie kodu w ChenJinchuang Lin-CMS-TP5 umożliwia zdalne wykonanie kodu. | Wstrzyknięcie kodu w ChenJinchuang Lin-CMS-TP5 umożliwia zdalne wykonanie kodu. |
Do wiadomości | 2,1 | 0,32 % | ||
| Wstrzyknięcie skryptów w winston-dsouza Ecommerce-Website umożliwia zdalne ataki XSS. | Wstrzyknięcie skryptów w winston-dsouza Ecommerce-Website umożliwia zdalne ataki XSS. |
Do wiadomości | 2,1 | 0,32 % | ||
| A vulnerability was found in ESPnet up to 202610.post2. | A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_model.py of the component Inference Model Handler. The manipulation of the argument _target_ results in deserialization. It is possible to launch the attack… |
Do wiadomości | 2,1 | 0,32 % | ||
| Wstrzyknięcie SQL w Student-Registration-System umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Student-Registration-System umożliwia zdalne wykonanie ataku. |
Do wiadomości | 2,1 | 0,32 % | ||
| Wstrzyknięcie SQL w core-php-admin-panel umożliwia zdalne wykonanie kodu. | Wstrzyknięcie SQL w core-php-admin-panel umożliwia zdalne wykonanie kodu. |
Do wiadomości | 2,1 | 0,32 % | ||
| Wstrzyknięcie SQL w cemtan sar2html umożliwia zdalne ataki na bazę danych. | Wstrzyknięcie SQL w cemtan sar2html umożliwia zdalne ataki na bazę danych. |
Do wiadomości | 2,1 | 0,32 % | ||
| A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. | A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The impacted element is the function OrderItem.asc/OrderItem.desc of the file /api/system/sys/dept/page of the component com.zs.sys.dept.controller.SysDeptController. This manipulation of the… |
Do wiadomości | 2,1 | 0,32 % | ||
| Wstrzyknięcie SQL w IceHRM umożliwia zdalne wykonanie ataku przez manipulację argumentem employeeList. | Wstrzyknięcie SQL w IceHRM umożliwia zdalne wykonanie ataku przez manipulację argumentem employeeList. |
Do wiadomości | 2,1 | 0,32 % | ||
| A security flaw has been discovered in DeepPavlov up to 1.7.0. | A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released to… |
Do wiadomości | 2,1 | 0,32 % | ||
| A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. | A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function get_class_from_dynamic_module of the file examples/chat_gradio_no_merge.py of the component Adapter Config. The manipulation of the argument… |
Do wiadomości | 2,1 | 0,32 % | ||
| A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. | A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend/parser/api/dataimport/Swagger3ParserApiDefinition.java of the component Swagger3 Parser. Performing a manipulation of the… |
Do wiadomości | 2,1 | 0,32 % | ||
| A flaw has been found in XnView Classic 2.52.5. | A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address… |
Do wiadomości | 2,1 | 0,32 % | ||
| A security flaw has been discovered in vllm-project vLLM up to 0.31.0. | A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of the component Penalty Handler. Performing a manipulation results in denial of service. Remote exploitation of the attack… |
Do wiadomości | 2,1 | 0,31 % | ||
| A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. | A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed… |
Do wiadomości | 2,1 | 0,31 % | ||
| Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.AuthorizationCallback module) allows an… | Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.AuthorizationCallback module) allows an attacker to make a victim's browser complete an authorization flow the victim never initiated. This vulnerability is associated with program file… |
Do wiadomości | 2,1 | 0,31 % | ||
| A vulnerability was found in agno-agi agno up to 3.0.6. | A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made… |
Do wiadomości | 2,1 | 0,31 % | ||
| A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack… |
Do wiadomości | 2,1 | 0,3 % | ||
| A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. | A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The… |
Do wiadomości | 2,1 | 0,3 % | ||
| A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. | A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection.… |
Do wiadomości | 2,1 | 0,3 % | ||
| A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. | A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack… |
Do wiadomości | 2,1 | 0,3 % | ||
| A vulnerability was determined in Jeebase 0.0.1. | A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manipulation of the argument user/tempUser can lead to dynamically-determined object attributes. The attack can be executed… |
Do wiadomości | 2,1 | 0,3 % | ||
| A vulnerability was detected in GPAC up to 26.07.0. | A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor… |
Do wiadomości | 2,1 | 0,3 % | ||
| Nieprawidłowe kontrole dostępu w youlaitech youlai-mall umożliwiają zdalne ataki. | Nieprawidłowe kontrole dostępu w youlaitech youlai-mall umożliwiają zdalne ataki. |
Do wiadomości | 2,1 | 0,3 % | ||
| A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. | A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible… |
Do wiadomości | 2,1 | 0,3 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.