Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
KATALOG INFORMACJI
Dotkliwość: Średnia
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Filtry katalogu · zakres, producent, rekomendacja
Niewłaściwa implementacja w V8 w Google Chrome umożliwia zdalnemu atakującemu obejście polityki samego pochodzenia.
Niewłaściwa implementacja w V8 w Google Chrome umożliwia zdalnemu atakującemu obejście polityki samego pochodzenia.
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Niewystarczające egzekwowanie polityki w HTML-in-Canvas w Google Chrome pozwala na obejście polityki same origin.
Niewystarczające egzekwowanie polityki w HTML-in-Canvas w Google Chrome pozwala na obejście polityki same origin.
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
W Craft użytkownicy mogą ujawniać wrażliwe zasoby przez zdjęcie profilowe.
W Craft użytkownicy mogą ujawniać wrażliwe zasoby przez zdjęcie profilowe.
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Tuleap is an Open Source Suite for management of software development and collaboration.
Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Edition and Tuleap Enterprise Edition below 17.0-2, 16.13-7 and 16.12-10 allow attackers to access file release system information in projects they do not…
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the Subscriptions Manager in all versions up to, and including,…
The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the Subscriptions Manager in all versions up to, and including, 2.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for…
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because…
FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winpr_read_png_from_buffer() allocates a bit-packed buffer for PNGs with bit depth below 8, while winpr_bitmap_write_buffer() copies rows assuming one byte per pixel. A malicious RDP…
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
RabbitMQ is a messaging and streaming broker.
RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash reporter and can leave unencrypted credentials in a crash dump file. the shovel worker genserver processes does not implement the formatstatus/2…
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process…
Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a crafted HTML page. (Chromium security severity: Low)
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Wtyczka WP Project Manager dla WordPressa ma podatność na wstrzyknięcie SQL, co pozwala na wyciek danych.
Wtyczka WP Project Manager dla WordPressa ma podatność na wstrzyknięcie SQL, co pozwala na wyciek danych.
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Plane is an open-source project management tool.
Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partial_update places its authorization checks inside the role update branch, so a guest or member can omit role and change another ProjectMember record's is_active field, including deactivating a project…
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authenticated…
SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authenticated low-privileged employees to modify system-wide level-3 protection settings. Attackers can call the unannotated updateConfig and loginFail batchDelete endpoints to disable…
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.7 and 2.52.0, the local web_fetch_tool and the WebFetch local fallback can consume excessive CPU and memory during HTML-to-Markdown conversion of attacker-controlled HTML…
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior…
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows…
Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows unauthenticated attackers to connect using the published coordinator-secret value. Attackers can emit READY_FOR_EXECUTION to retrieve decrypted run environment variables…
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
An out-of-bounds write issue was addressed with improved bounds checking.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected…
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence.
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no view rights on a page may see the content of an office attachment displayed with the view file macro. This issue has been patched in version 1.27.0.
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI…
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There is…
- CVSS
- 6,5
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying…
vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt. Attackers can set a UUID EXIF ImageID to receive another request's cached processed media, or match…
- CVSS
- 6,5
- EPSS
- 0,27 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start /…
The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of…
- CVSS
- 6,5
- EPSS
- 0,27 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode…
The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.58.1. This is due to the software allowing users to execute an action that does not properly validate a value…
- CVSS
- 6,5
- EPSS
- 0,27 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter…
The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
- CVSS
- 6,5
- EPSS
- 0,27 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection…
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort_by' parameter in all versions up to, and including, 3.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient…
- CVSS
- 6,5
- EPSS
- 0,27 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via…
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via 'fields[][value]' Parameter in all versions up to, and including, 2.11.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…
- CVSS
- 6,5
- EPSS
- 0,27 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Wstrzyknięcie SQL w rubygem-katello umożliwia nieautoryzowany dostęp do danych.
Wstrzyknięcie SQL w rubygem-katello umożliwia nieautoryzowany dostęp do danych.
- CVSS
- 6,5
- EPSS
- 0,27 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions. | Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions. |
Do wiadomości | 6,5 | 0,28 % | ||
| Niewłaściwa implementacja w V8 w Google Chrome umożliwia zdalnemu atakującemu obejście polityki samego pochodzenia. | Niewłaściwa implementacja w V8 w Google Chrome umożliwia zdalnemu atakującemu obejście polityki samego pochodzenia. |
Do wiadomości | 6,5 | 0,28 % | ||
| Niewystarczające egzekwowanie polityki w HTML-in-Canvas w Google Chrome pozwala na obejście polityki same origin. | Niewystarczające egzekwowanie polityki w HTML-in-Canvas w Google Chrome pozwala na obejście polityki same origin. |
Do wiadomości | 6,5 | 0,28 % | ||
| W Craft użytkownicy mogą ujawniać wrażliwe zasoby przez zdjęcie profilowe. | W Craft użytkownicy mogą ujawniać wrażliwe zasoby przez zdjęcie profilowe. |
Do wiadomości | 6,5 | 0,28 % | ||
| Tuleap is an Open Source Suite for management of software development and collaboration. | Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Edition and Tuleap Enterprise Edition below 17.0-2, 16.13-7 and 16.12-10 allow attackers to access file release system information in projects they do not… |
Do wiadomości | 6,5 | 0,28 % | ||
| The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the Subscriptions Manager in all versions up to, and including,… | The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the Subscriptions Manager in all versions up to, and including, 2.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for… |
Do wiadomości | 6,5 | 0,28 % | ||
| FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because… | FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winpr_read_png_from_buffer() allocates a bit-packed buffer for PNGs with bit depth below 8, while winpr_bitmap_write_buffer() copies rows assuming one byte per pixel. A malicious RDP… |
Do wiadomości | 6,5 | 0,28 % | ||
| RabbitMQ is a messaging and streaming broker. | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash reporter and can leave unencrypted credentials in a crash dump file. the shovel worker genserver processes does not implement the formatstatus/2… |
Do wiadomości | 6,5 | 0,28 % | ||
| Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process… | Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a crafted HTML page. (Chromium security severity: Low) |
Do wiadomości | 6,5 | 0,28 % | ||
| Wtyczka WP Project Manager dla WordPressa ma podatność na wstrzyknięcie SQL, co pozwala na wyciek danych. | Wtyczka WP Project Manager dla WordPressa ma podatność na wstrzyknięcie SQL, co pozwala na wyciek danych. |
Do wiadomości | 6,5 | 0,28 % | ||
| Plane is an open-source project management tool. | Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partial_update places its authorization checks inside the role update branch, so a guest or member can omit role and change another ProjectMember record's is_active field, including deactivating a project… |
Do wiadomości | 6,5 | 0,28 % | ||
| SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authenticated… | SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authenticated low-privileged employees to modify system-wide level-3 protection settings. Attackers can call the unannotated updateConfig and loginFail batchDelete endpoints to disable… |
Do wiadomości | 6,5 | 0,28 % | ||
| Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.7 and 2.52.0, the local web_fetch_tool and the WebFetch local fallback can consume excessive CPU and memory during HTML-to-Markdown conversion of attacker-controlled HTML… |
Do wiadomości | 6,5 | 0,28 % | ||
| IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior… | IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password. |
Do wiadomości | 6,5 | 0,28 % | ||
| Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows… | Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows unauthenticated attackers to connect using the published coordinator-secret value. Attackers can emit READY_FOR_EXECUTION to retrieve decrypted run environment variables… |
Do wiadomości | 6,5 | 0,28 % | ||
| An out-of-bounds write issue was addressed with improved bounds checking. | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected… |
Do wiadomości | 6,5 | 0,28 % | ||
| XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. | XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no view rights on a page may see the content of an office attachment displayed with the view file macro. This issue has been patched in version 1.27.0. |
Do wiadomości | 6,5 | 0,28 % | ||
| SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI… | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There is… |
Do wiadomości | 6,5 | 0,28 % | ||
| vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying… | vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt. Attackers can set a UUID EXIF ImageID to receive another request's cached processed media, or match… |
Do wiadomości | 6,5 | 0,27 % | ||
| The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start /… | The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of… |
Do wiadomości | 6,5 | 0,27 % | ||
| The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode… | The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.58.1. This is due to the software allowing users to execute an action that does not properly validate a value… |
Do wiadomości | 6,5 | 0,27 % | ||
| The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter… | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL… |
Do wiadomości | 6,5 | 0,27 % | ||
| The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection… | The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort_by' parameter in all versions up to, and including, 3.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient… |
Do wiadomości | 6,5 | 0,27 % | ||
| The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via… | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via 'fields[][value]' Parameter in all versions up to, and including, 2.11.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on… |
Do wiadomości | 6,5 | 0,27 % | ||
| Wstrzyknięcie SQL w rubygem-katello umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w rubygem-katello umożliwia nieautoryzowany dostęp do danych. |
Do wiadomości | 6,5 | 0,27 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.