Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trusted_jar_paths'.
The startup flag 'trusted_jar_paths' references URIs for loading files from local or remote filesystems.…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as view_ptables, can obtain historical template contents belonging to…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" function in all versions up to, and including, 3.40.1. This is due to insufficient escaping on the user supplied parameters and lack of…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly verify ownership before deleting an attachment, allowing unauthenticated attackers to permanently delete author-less attachments…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allowing unauthenticated attackers to re-trigger a form's configured workflow actions such as notification emails and integrations.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php concatenates the search_name and search_email GET parameters into both the user-list query and the COUNT query used for pagination without…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 and 4.2.6 and 4.3.1, Atom exhaustion: OAuth2 JWT tag: scope values. extractscopes/1 parses scopes of the form .tag: and calls rabbitdatacoercion:toatom() to convert to a tag atom. The token signature is…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eos_scfm_duplicate_post_as_draft() function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Gitea's shared comparison helper omits the token repository-access check used when updating pull requests. A public-only token with read:repository scope can route a comparison or pull request creation through a public base repository and retrieve commit history and diffs from a private head…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trusted_jar_paths'.
The startup flag 'trusted_jar_paths' references URIs for loading files from local or remote filesystems.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as view_ptables, can obtain historical template contents belonging to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" function in all versions up to, and including, 3.40.1. This is due to insufficient escaping on the user supplied parameters and lack of…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly verify ownership before deleting an attachment, allowing unauthenticated attackers to permanently delete author-less attachments…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allowing unauthenticated attackers to re-trigger a form's configured workflow actions such as notification emails and integrations.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php concatenates the search_name and search_email GET parameters into both the user-list query and the COUNT query used for pagination without…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 and 4.2.6 and 4.3.1, Atom exhaustion: OAuth2 JWT tag: scope values. extractscopes/1 parses scopes of the form .tag: and calls rabbitdatacoercion:toatom() to convert to a tag atom. The token signature is…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eos_scfm_duplicate_post_as_draft() function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Gitea's shared comparison helper omits the token repository-access check used when updating pull requests. A public-only token with read:repository scope can route a comparison or pull request creation through a public base repository and retrieve commit history and diffs from a private head…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki