Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media_image() method that allows attackers controlling a Shelly device's thumb field to serve arbitrary HTML content by supplying a data URI with a text/html content type without…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in ajayrandhawa User-Management-PHP-MYSQL web up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This vulnerability affects unknown code. Performing manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption. The attack may be initiated remotely. The vendor was…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manipulation of the argument Title results in csv injection. It is possible to initiate the attack remotely. The exploit is now…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
When using the Grafana Databricks Datasource Plugin,
if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in
the wrong user identifier being used, and information for which the viewer…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
When using the Grafana Snowflake Datasource Plugin,
if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in
the wrong user identifier being used, and information for which the viewer is…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send_message_mobile of the file controllers/simple.php. Such manipulation of the argument user_id leads to weak password recovery. The attack can be launched remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Daptin 0.10.3. Affected by this vulnerability is the function goqu.L of the file server/resource/resource_aggregate.go of the component Aggregate API. The manipulation of the argument column/group/order leads to sql injection. The attack may be initiated remotely.…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. The…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure.…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attack may be performed from remote. The exploit has been…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is the function echo of the file doctorregistration.php of the component Doctor Registration. Executing a manipulation of the argument doc_name can lead to…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The impacted element is an unknown function of the file feedback.php. The manipulation of the argument msg leads to cross site scripting. The attack can be initiated…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
CVSS
2,1
EPSS
0,27 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media_image() method that allows attackers controlling a Shelly device's thumb field to serve arbitrary HTML content by supplying a data URI with a text/html content type without…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in ajayrandhawa User-Management-PHP-MYSQL web up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This vulnerability affects unknown code. Performing manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption. The attack may be initiated remotely. The vendor was…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manipulation of the argument Title results in csv injection. It is possible to initiate the attack remotely. The exploit is now…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
When using the Grafana Databricks Datasource Plugin,
if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in
the wrong user identifier being used, and information for which the viewer…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
When using the Grafana Snowflake Datasource Plugin,
if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in
the wrong user identifier being used, and information for which the viewer is…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send_message_mobile of the file controllers/simple.php. Such manipulation of the argument user_id leads to weak password recovery. The attack can be launched remotely. The exploit has been…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Daptin 0.10.3. Affected by this vulnerability is the function goqu.L of the file server/resource/resource_aggregate.go of the component Aggregate API. The manipulation of the argument column/group/order leads to sql injection. The attack may be initiated remotely.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attack may be performed from remote. The exploit has been…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is the function echo of the file doctorregistration.php of the component Doctor Registration. Executing a manipulation of the argument doc_name can lead to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The impacted element is an unknown function of the file feedback.php. The manipulation of the argument msg leads to cross site scripting. The attack can be initiated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
2,1
0,27 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.