Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and including, 3.11.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
The Simple Newsletter Plugin WordPress plugin before 4.3.3 does not verify that the requester is the subscriber named in a public request before rendering that subscriber's stored details, allowing unauthenticated users to disclose a subscriber's personal data along with the key that authorises…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Windu CMS is vulnerable to Broken Access Control in user editing functionality. Malicious attacker can send a GET request which allows privileged users to delete Super Admins which is not possible with GUI.
Only version 4.1 was tested and confirmed as vulnerable.
This issue was fixed in version…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.25.0, and Go module 2.16.0 through 2.28.0 contains an authorization bypass vulnerability that allows paying clients to unlock unpaid routes by supplying a mismatched PaymentPayload.resource URL.…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could read Spacebridge asymmetric private keys, which are secrets that compromise affected…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and including, 3.11.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
The Simple Newsletter Plugin WordPress plugin before 4.3.3 does not verify that the requester is the subscriber named in a public request before rendering that subscriber's stored details, allowing unauthenticated users to disclose a subscriber's personal data along with the key that authorises…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Windu CMS is vulnerable to Broken Access Control in user editing functionality. Malicious attacker can send a GET request which allows privileged users to delete Super Admins which is not possible with GUI.
Only version 4.1 was tested and confirmed as vulnerable.
This issue was fixed in version…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.25.0, and Go module 2.16.0 through 2.28.0 contains an authorization bypass vulnerability that allows paying clients to unlock unpaid routes by supplying a mismatched PaymentPayload.resource URL.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could read Spacebridge asymmetric private keys, which are secrets that compromise affected…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki