Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the default ThreadSafeCookieStore does not retain whether a Set-Cookie response used a secure transport. It accepts Secure cookies received…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhook_url can later resolve to 127.0.0.1, 169.254.169.254, or another internal…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, the previous fix for CVE-2026-25738 did not cover an edge case, allowing an event organizer to submit a crafted URL that points to a prohibited local target but is…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows phyiscally-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious drive onto the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the default ThreadSafeCookieStore does not retain whether a Set-Cookie response used a secure transport. It accepts Secure cookies received…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhook_url can later resolve to 127.0.0.1, 169.254.169.254, or another internal…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, the previous fix for CVE-2026-25738 did not cover an edge case, allowing an event organizer to submit a crafted URL that points to a prohibited local target but is…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update process. An attacker with authenticated administrator-level access to the FSP can, under specific conditions, execute…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows phyiscally-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious drive onto the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki