KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached…
Nieprawidłowe kontrole dostępu w QILING Disk Master umożliwiają lokalne ataki.
Nieprawidłowe kontrole dostępu w MiniTool Partition Wizard umożliwiają lokalne ataki.
A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The…
Nieprawidłowy eksport komponentów aplikacji w textPlus umożliwia lokalne ataki.
A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.…
A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py of the component Tokenizer. This manipulation of the argument auto_map causes code injection. The attack is…
Luka w Oracle EDI Gateway umożliwia nieautoryzowany dostęp do danych.
Luka w Oracle Property Manager umożliwia nieautoryzowany dostęp do danych.
Luka w Oracle Work in Process umożliwia nieautoryzowany dostęp do danych.
A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function read_audio_data of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is now public and may be used. The project…
Podatność w Oracle Inventory Management umożliwia częściowe zablokowanie usługi przez uprzywilejowanego atakującego.
A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the file ToggleGeneric.java. The manipulation of the argument Class leads to improper export of android application components. Local access is required to approach…
Podatność w Oracle Agile PLM MCAD Connector pozwala na nieautoryzowane modyfikacje danych.
Podatność w Oracle Production Scheduling umożliwia nieautoryzowane modyfikacje danych.
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial…
A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The…
Lokalna podatność w Sipeed PicoClaw umożliwia atak typu time-of-check time-of-use.
Przepełnienie bufora w Open Asset Import Library umożliwia lokalne ataki.
A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt_shape results in improper…
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise…
Wyciek pamięci w ImageMagick pozwala na odmowę usługi przez złośliwe pliki XML.
A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of the component GGUF Parser. This manipulation of the argument data_offset causes out-of-bounds read. The attack requires local…
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has…
A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. | A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached… |
Do wiadomości | 1,9 | 0,15 % | ||
| Nieprawidłowe kontrole dostępu w QILING Disk Master umożliwiają lokalne ataki. | Nieprawidłowe kontrole dostępu w QILING Disk Master umożliwiają lokalne ataki. |
Do wiadomości | 1,9 | 0,15 % | ||
| Nieprawidłowe kontrole dostępu w MiniTool Partition Wizard umożliwiają lokalne ataki. | Nieprawidłowe kontrole dostępu w MiniTool Partition Wizard umożliwiają lokalne ataki. |
Do wiadomości | 1,9 | 0,15 % | ||
| A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. | A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The… |
Do wiadomości | 1,9 | 0,15 % | ||
| Nieprawidłowy eksport komponentów aplikacji w textPlus umożliwia lokalne ataki. | Nieprawidłowy eksport komponentów aplikacji w textPlus umożliwia lokalne ataki. |
Do wiadomości | 1,9 | 0,15 % | ||
| A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. | A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.… |
Do wiadomości | 1,9 | 0,14 % | ||
| A weakness has been identified in ModelTC LightX2V up to 0.5.0. | A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py of the component Tokenizer. This manipulation of the argument auto_map causes code injection. The attack is… |
Do wiadomości | 1,9 | 0,14 % | ||
| Luka w Oracle EDI Gateway umożliwia nieautoryzowany dostęp do danych. | Luka w Oracle EDI Gateway umożliwia nieautoryzowany dostęp do danych. |
Do wiadomości | 1,9 | 0,14 % | ||
| Luka w Oracle Property Manager umożliwia nieautoryzowany dostęp do danych. | Luka w Oracle Property Manager umożliwia nieautoryzowany dostęp do danych. |
Do wiadomości | 1,9 | 0,14 % | ||
| Luka w Oracle Work in Process umożliwia nieautoryzowany dostęp do danych. | Luka w Oracle Work in Process umożliwia nieautoryzowany dostęp do danych. |
Do wiadomości | 1,9 | 0,14 % | ||
| A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. | A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function read_audio_data of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is now public and may be used. The project… |
Do wiadomości | 1,9 | 0,14 % | ||
| Podatność w Oracle Inventory Management umożliwia częściowe zablokowanie usługi przez uprzywilejowanego atakującego. | Podatność w Oracle Inventory Management umożliwia częściowe zablokowanie usługi przez uprzywilejowanego atakującego. |
Do wiadomości | 1,9 | 0,14 % | ||
| A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. | A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the file ToggleGeneric.java. The manipulation of the argument Class leads to improper export of android application components. Local access is required to approach… |
Do wiadomości | 1,9 | 0,13 % | ||
| Podatność w Oracle Agile PLM MCAD Connector pozwala na nieautoryzowane modyfikacje danych. | Podatność w Oracle Agile PLM MCAD Connector pozwala na nieautoryzowane modyfikacje danych. |
Do wiadomości | 1,9 | 0,13 % | ||
| Podatność w Oracle Production Scheduling umożliwia nieautoryzowane modyfikacje danych. | Podatność w Oracle Production Scheduling umożliwia nieautoryzowane modyfikacje danych. |
Do wiadomości | 1,9 | 0,13 % | ||
| Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial… |
Do wiadomości | 1,9 | 0,13 % | ||
| A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. | A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The… |
Do wiadomości | 1,9 | 0,13 % | ||
| Lokalna podatność w Sipeed PicoClaw umożliwia atak typu time-of-check time-of-use. | Lokalna podatność w Sipeed PicoClaw umożliwia atak typu time-of-check time-of-use. |
Do wiadomości | 1,9 | 0,12 % | ||
| Przepełnienie bufora w Open Asset Import Library umożliwia lokalne ataki. | Przepełnienie bufora w Open Asset Import Library umożliwia lokalne ataki. |
Do wiadomości | 1,9 | 0,12 % | ||
| A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. | A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt_shape results in improper… |
Do wiadomości | 1,9 | 0,12 % | ||
| Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query). | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query). Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise… |
Do wiadomości | 1,9 | 0,12 % | ||
| Wyciek pamięci w ImageMagick pozwala na odmowę usługi przez złośliwe pliki XML. | Wyciek pamięci w ImageMagick pozwala na odmowę usługi przez złośliwe pliki XML. |
Do wiadomości | 1,9 | 0,12 % | ||
| A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. | A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of the component GGUF Parser. This manipulation of the argument data_offset causes out-of-bounds read. The attack requires local… |
Do wiadomości | 1,9 | 0,11 % | ||
| A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. | A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has… |
Do wiadomości | 1,9 | 0,11 % | ||
| A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns… | A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR. |
Do wiadomości | 1,9 | 0,11 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.