Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested generic type signatures. Attackers can supply a crafted class file with a long Signature attribute containing many nested type…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute() that sizes an int array from num_bootstrap_methods without validating attribute_length. Attackers can supply a crafted class file of about 100 bytes that forces roughly 2 GB…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JSR rule. Attackers can supply a crafted invalid class file with multiple RET instructions for one JSR, triggering a roughly 2 GB allocation…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when using COMPUTE_MAXS or COMPUTE_FRAMES. Attackers can supply a crafted class file with thousands of overlapping exception handlers, causing excessive…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTE_FRAMES. Attackers can craft methods that make the unbounded MethodWriter.computeAllFrames() fix point algorithm converge…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The HireZoot WordPress plugin before 4.1.1 does not sanitise and escape some of its stored data before outputting it in the admin dashboard, and additionally reverses the HTML-entity encoding that would otherwise neutralise it, allowing users with the Author role to perform Stored Cross-Site…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The module asks for a `TX_THREAD` control block through `txm_module_object_allocate`; `_txm_module_manager_thread_create` then takes a second allocation of…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT911_TOUCH_POINTS_MSK (0x0F), yielding a value of 0..15. In gt911_process() that value is used directly as the loop bound for filling point_reg[], a…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineon::Codec::Read that undersizes the scanline buffer, causing a heap out-of-bounds read. Attackers can supply a crafted Cineon file with a huge declared width that wraps the size…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author role and above to perform SQL injection attacks.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the analyst's machine to read an arbitrary local file named inside the bundle and send its contents to an arbitrary remote host.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
CVSS
6,8
EPSS
0,16 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested generic type signatures. Attackers can supply a crafted class file with a long Signature attribute containing many nested type…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute() that sizes an int array from num_bootstrap_methods without validating attribute_length. Attackers can supply a crafted class file of about 100 bytes that forces roughly 2 GB…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JSR rule. Attackers can supply a crafted invalid class file with multiple RET instructions for one JSR, triggering a roughly 2 GB allocation…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when using COMPUTE_MAXS or COMPUTE_FRAMES. Attackers can supply a crafted class file with thousands of overlapping exception handlers, causing excessive…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTE_FRAMES. Attackers can craft methods that make the unbounded MethodWriter.computeAllFrames() fix point algorithm converge…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The HireZoot WordPress plugin before 4.1.1 does not sanitise and escape some of its stored data before outputting it in the admin dashboard, and additionally reverses the HTML-entity encoding that would otherwise neutralise it, allowing users with the Author role to perform Stored Cross-Site…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The module asks for a `TX_THREAD` control block through `txm_module_object_allocate`; `_txm_module_manager_thread_create` then takes a second allocation of…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT911_TOUCH_POINTS_MSK (0x0F), yielding a value of 0..15. In gt911_process() that value is used directly as the loop bound for filling point_reg[], a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineon::Codec::Read that undersizes the scanline buffer, causing a heap out-of-bounds read. Attackers can supply a crafted Cineon file with a huge declared width that wraps the size…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author role and above to perform SQL injection attacks.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the analyst's machine to read an arbitrary local file named inside the bundle and send its contents to an arbitrary remote host.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
6,8
0,16 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.