Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attacker to crash the NanoMQ broker by sending a POST request to `/api/v4/mqtt/publish` with `user_properties` as a JSON array instead of a JSON object. The crash occurs because…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker can inject arbitrary HTTP requests, potentially bypassing security controls…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The Authors List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.6.1 via the via arbitrary method call from Authors_List_Shortcode class. This makes it possible for authenticated attackers, with Contributor-level access and above, to…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attacker to crash the NanoMQ broker by sending a POST request to `/api/v4/mqtt/publish` with `user_properties` as a JSON array instead of a JSON object. The crash occurs because…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker can inject arbitrary HTTP requests, potentially bypassing security controls…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The Authors List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.6.1 via the via arbitrary method call from Authors_List_Shortcode class. This makes it possible for authenticated attackers, with Contributor-level access and above, to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki