Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated downloads. A source that reported `max_response_items` as `0` made these loops run indefinitely and grow server memory until it was exhausted. Any…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
The Brizy – Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.16 via the get_users() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team's secret…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumer_access() function (job_events, workflow_events, ad_hoc_command_events). Three event groups - inventory_update_events, project_update_events, and…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.1. Visiting a website may lead to an app denial-of-service.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape (e.g. hidden dimension is wrong), regardless of…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit.
BIND will first need to store a DNS record for a key (KEY, DNSKEY, etc.). That key must specify a PRIVATEDNS algorithm (253), and in the algorithm…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated downloads. A source that reported `max_response_items` as `0` made these loops run indefinitely and grow server memory until it was exhausted. Any…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
The Brizy – Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.16 via the get_users() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team's secret…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumer_access() function (job_events, workflow_events, ad_hoc_command_events). Three event groups - inventory_update_events, project_update_events, and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.1. Visiting a website may lead to an app denial-of-service.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape (e.g. hidden dimension is wrong), regardless of…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit.
BIND will first need to store a DNS record for a key (KEY, DNSKEY, etc.). That key must specify a PRIVATEDNS algorithm (253), and in the algorithm…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,38 % · rekomendacja wg zapisanej polityki