KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Luka w Electron umożliwia wykonanie kodu natywnego przez złośliwe rozszerzenia DevTools.
Błąd w OpenSSL przed 1.4.9 umożliwia atakującym wywołanie awarii systemu przez złośliwe pliki tożsamości.
Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For values against /api/auth/signIn,…
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.
Nuxt versions >= 4.4.7 and < 4.5.1, and >= 3.21.7 and < 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint (GET /.well-known/appspecific/com.chrome.devtools.json). The endpoint's local-request gate (isLocalDevRequest) is…
Wstrzyknięcie XSS w Pen Drive umożliwia atakującemu wykonanie kodu w przeglądarkach użytkowników.
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream _validate_origin method accepts request_origin.startswith(allowed), so the attacker-controlled localhost.evil.example HTTP origin matches the localhost allowlist. Without an API key, a malicious webpage can…
In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidation(true), never ran for a message using RFC 9709 content-encryption key derivation (id-alg-cek-hkdf-sha256). The branch that…
MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Ap_sort_cmp and…
libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values in X/28/3 packets. Attackers can send a crafted Teletext stream decoded via vbi_decode with every slot set to…
darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknet_network.cpp as xcalloc(net.n, sizeof(Darknet::Layer)), sized to exactly the number of layer sections the file declares. The…
hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly…
Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PT_MV_STRING8, PT_MV_UNICODE or…
Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetch_ssl_certificate=true with crafted userinfo URLs so…
Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confidentiality and integrity and high impact on availability of…
Dereferencja wskaźnika NULL w OpenEXR powoduje awarię aplikacji i odmowę usługi.
Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can send a different forwarded address per request so the limiter keyed on rewritten RemoteAddr never…
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once.
Przechwycenie hasła steganograficznego w openssl_encrypt umożliwia lokalnym użytkownikom dostęp do wrażliwych danych.
WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts GET requests. Attackers can store an img tag in a video description that transfers video ownership to an attacker-controlled…
Wykorzystanie przejścia ścieżki w KUNBUS RevPiPyLoad pozwala na usunięcie dowolnych plików.
Brak autoryzacji w Innorix WP umożliwia atak typu Path Traversal.
Słaba implementacja haszowania haseł w OTTO® Fleet Manager umożliwia ataki brute-force.
Nieinicjowane odczyty stosu w Amazon Ion-C mogą ujawniać wrażliwe dane w pamięci.
UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Luka w Electron umożliwia wykonanie kodu natywnego przez złośliwe rozszerzenia DevTools. | Luka w Electron umożliwia wykonanie kodu natywnego przez złośliwe rozszerzenia DevTools. |
Do wiadomości | 6,9 | 0,19 % | ||
| Błąd w OpenSSL przed 1.4.9 umożliwia atakującym wywołanie awarii systemu przez złośliwe pliki tożsamości. | Błąd w OpenSSL przed 1.4.9 umożliwia atakującym wywołanie awarii systemu przez złośliwe pliki tożsamości. |
Do wiadomości | 6,9 | 0,19 % | ||
| Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP… | Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For values against /api/auth/signIn,… |
Do wiadomości | 6,9 | 0,18 % | ||
| Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages. | Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages. |
Do wiadomości | 6,9 | 0,18 % | ||
| Nuxt versions >= 4.4.7 and < 4.5.1, and >= 3.21.7 and < 3.21.10, contain an information disclosure vulnerability in the development… | Nuxt versions >= 4.4.7 and < 4.5.1, and >= 3.21.7 and < 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint (GET /.well-known/appspecific/com.chrome.devtools.json). The endpoint's local-request gate (isLocalDevRequest) is… |
Do wiadomości | 6,9 | 0,18 % | ||
| Wstrzyknięcie XSS w Pen Drive umożliwia atakującemu wykonanie kodu w przeglądarkach użytkowników. | Wstrzyknięcie XSS w Pen Drive umożliwia atakującemu wykonanie kodu w przeglądarkach użytkowników. |
Do wiadomości | 6,9 | 0,18 % | ||
| PraisonAI is a multi-agent teams system. | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream _validate_origin method accepts request_origin.startswith(allowed), so the attacker-controlled localhost.evil.example HTTP origin matches the localhost allowlist. Without an API key, a malicious webpage can… |
Do wiadomości | 6,9 | 0,18 % | ||
| In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTr… | In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidation(true), never ran for a message using RFC 9709 content-encryption key derivation (id-alg-cek-hkdf-sha256). The branch that… |
Do wiadomości | 6,9 | 0,17 % | ||
| MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to… | MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Ap_sort_cmp and… |
Do wiadomości | 6,9 | 0,17 % | ||
| libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by… | libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values in X/28/3 packets. Attackers can send a crafted Teletext stream decoded via vbi_decode with every slot set to… |
Do wiadomości | 6,9 | 0,17 % | ||
| darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. | darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknet_network.cpp as xcalloc(net.n, sizeof(Darknet::Layer)), sized to exactly the number of layer sections the file declares. The… |
Do wiadomości | 6,9 | 0,17 % | ||
| hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly… | hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly… |
Do wiadomości | 6,9 | 0,17 % | ||
| Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger… | Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PT_MV_STRING8, PT_MV_UNICODE or… |
Do wiadomości | 6,9 | 0,17 % | ||
| Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows… | Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetch_ssl_certificate=true with crafted userinfo URLs so… |
Do wiadomości | 6,9 | 0,17 % | ||
| Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user… | Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confidentiality and integrity and high impact on availability of… |
Do wiadomości | 6,9 | 0,17 % | ||
| Dereferencja wskaźnika NULL w OpenEXR powoduje awarię aplikacji i odmowę usługi. | Dereferencja wskaźnika NULL w OpenEXR powoduje awarię aplikacji i odmowę usługi. |
Do wiadomości | 6,9 | 0,17 % | ||
| Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by… | Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can send a different forwarded address per request so the limiter keyed on rewritten RemoteAddr never… |
Do wiadomości | 6,9 | 0,17 % | ||
| The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST… | The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once. |
Do wiadomości | 6,9 | 0,17 % | ||
| Przechwycenie hasła steganograficznego w openssl_encrypt umożliwia lokalnym użytkownikom dostęp do wrażliwych danych. | Przechwycenie hasła steganograficznego w openssl_encrypt umożliwia lokalnym użytkownikom dostęp do wrażliwych danych. |
Do wiadomości | 6,9 | 0,17 % | ||
| WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request… | WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts GET requests. Attackers can store an img tag in a video description that transfers video ownership to an attacker-controlled… |
Do wiadomości | 6,9 | 0,17 % | ||
| Wykorzystanie przejścia ścieżki w KUNBUS RevPiPyLoad pozwala na usunięcie dowolnych plików. | Wykorzystanie przejścia ścieżki w KUNBUS RevPiPyLoad pozwala na usunięcie dowolnych plików. |
Do wiadomości | 6,9 | 0,17 % | ||
| Brak autoryzacji w Innorix WP umożliwia atak typu Path Traversal. | Brak autoryzacji w Innorix WP umożliwia atak typu Path Traversal. |
Do wiadomości | 6,9 | 0,17 % | ||
| Słaba implementacja haszowania haseł w OTTO® Fleet Manager umożliwia ataki brute-force. | Słaba implementacja haszowania haseł w OTTO® Fleet Manager umożliwia ataki brute-force. |
Do wiadomości | 6,9 | 0,16 % | ||
| Nieinicjowane odczyty stosu w Amazon Ion-C mogą ujawniać wrażliwe dane w pamięci. | Nieinicjowane odczyty stosu w Amazon Ion-C mogą ujawniać wrażliwe dane w pamięci. |
Do wiadomości | 6,9 | 0,16 % | ||
| UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. | UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0. |
Do wiadomości | 6,9 | 0,16 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.