Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in improper…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors.…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This impacts an unknown function of the file model/User.php. The manipulation of the argument employee_id/id/admin leads to sql injection. The attack can be initiated…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability was found in Jihai Jshop MiniProgram Mall System 2.9.0. Affected by this issue is some unknown functionality of the file /index.php/api.html. The manipulation of the argument cat_id results in sql injection. The attack may be launched remotely. The exploit has been made public and…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.compose_file leads to os command injection. An…
Opis źródłowy NVD · ENCVSS 1,9 · EPSS 1,22 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controllers/cas.go of the component Proxy Validation. Such manipulation of the argument pgtUrl leads to server-side request forgery. The attack may be performed from…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A flaw has been found in O2OA up to 10.0.1-ce. This affects the function ActionUploadExcelWithUrl of the file /x_general_assemble_control/jaxrs/excel/upload/with/url of the component General Module. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection.
This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1.
The escape/1 clause for…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection.
This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete of the component Credentials Handler. This manipulation of the argument teamId causes improper privilege management. The…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gf_mx_v of the file utils/os_thread.c of the component MP4Box. Such manipulation leads to use after free. The attack can be launched remotely. The exploit has been disclosed publicly and may be…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler.…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file:// URI without rejecting…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Netcore NR268 1.7.121109. Affected by this issue is some unknown functionality of the component CGI Endpoint. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/UploadController.class.php of the component UploadTicketFile Endpoint. Such manipulation of the argument cmd leads to unrestricted upload.…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
CVSS
2,1
EPSS
0,21 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in improper…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This impacts an unknown function of the file model/User.php. The manipulation of the argument employee_id/id/admin leads to sql injection. The attack can be initiated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability was found in Jihai Jshop MiniProgram Mall System 2.9.0. Affected by this issue is some unknown functionality of the file /index.php/api.html. The manipulation of the argument cat_id results in sql injection. The attack may be launched remotely. The exploit has been made public and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.compose_file leads to os command injection. An…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 1,9 · EPSS 1,22 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controllers/cas.go of the component Proxy Validation. Such manipulation of the argument pgtUrl leads to server-side request forgery. The attack may be performed from…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A flaw has been found in O2OA up to 10.0.1-ce. This affects the function ActionUploadExcelWithUrl of the file /x_general_assemble_control/jaxrs/excel/upload/with/url of the component General Module. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection.
This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1.
The escape/1 clause for…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection.
This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete of the component Credentials Handler. This manipulation of the argument teamId causes improper privilege management. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gf_mx_v of the file utils/os_thread.c of the component MP4Box. Such manipulation leads to use after free. The attack can be launched remotely. The exploit has been disclosed publicly and may be…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file:// URI without rejecting…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Netcore NR268 1.7.121109. Affected by this issue is some unknown functionality of the component CGI Endpoint. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/UploadController.class.php of the component UploadTicketFile Endpoint. Such manipulation of the argument cmd leads to unrestricted upload.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
2,1
0,21 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.