Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, ThreadSafeCookieStore validates Domain attributes with domain matching but does not reject public suffixes. A host beneath a suffix…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the WinPR clipboard function convert_filedescriptors_to_file_list(), which scans a server-controlled FILEDESCRIPTORW cFileName with unbounded _wcschr() and count_special_chars() calls without a NUL-termination guarantee. A malicious…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive Data.This issue affects QA Analytics: from n/a through 5.3.0.0.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR file whose later part headers bypass ReadAttribute() bounds…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Wazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthenticated attackers to bypass max_login_attempts by sending concurrent requests. Attackers can fire concurrent login bursts to the authenticate and run_as endpoints, each passing the block check…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attackers to identify valid accounts because the AvatarServlet (/avatar) performs no session validation. Attackers can supply usernames or numeric IDs in the userId parameter and…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Description
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with
proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the proxied request.
Impact
This vulnerability may allow remote attackers…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker which sends a specific set of BGP communities to cause a Denial-of-Service (DoS) as rpd crashes when graceful-shutdown sender community is added…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream lacking a parseable SPS to…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data from other running preprocessors not available to said administrator.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /generate-pdf endpoint. Attackers can embed inline img elements in report_content…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper::getAjax(), wired through Joomla’s core com_ajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
CVSS
6,9
EPSS
0,24 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, ThreadSafeCookieStore validates Domain attributes with domain matching but does not reject public suffixes. A host beneath a suffix…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the WinPR clipboard function convert_filedescriptors_to_file_list(), which scans a server-controlled FILEDESCRIPTORW cFileName with unbounded _wcschr() and count_special_chars() calls without a NUL-termination guarantee. A malicious…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive Data.This issue affects QA Analytics: from n/a through 5.3.0.0.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR file whose later part headers bypass ReadAttribute() bounds…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Wazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthenticated attackers to bypass max_login_attempts by sending concurrent requests. Attackers can fire concurrent login bursts to the authenticate and run_as endpoints, each passing the block check…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attackers to identify valid accounts because the AvatarServlet (/avatar) performs no session validation. Attackers can supply usernames or numeric IDs in the userId parameter and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Description
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with
proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the proxied request.
Impact
This vulnerability may allow remote attackers…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker which sends a specific set of BGP communities to cause a Denial-of-Service (DoS) as rpd crashes when graceful-shutdown sender community is added…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream lacking a parseable SPS to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data from other running preprocessors not available to said administrator.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /generate-pdf endpoint. Attackers can embed inline img elements in report_content…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper::getAjax(), wired through Joomla’s core com_ajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
6,9
0,24 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.