KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
W Beets przed wersją 2.10.0 wstrzyknięcie kodu HTML w interfejsie webowym umożliwia atak na DOM.
Błąd w Electron umożliwia zdalne wykonanie kodu przez niewłaściwe zarządzanie oknami.
LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels…
W BlenderMCP występuje luka w przechodzeniu ścieżek, umożliwiająca zapis dowolnych plików.
W ChurchCRM przed wersją 6.5.3 występuje podatność SSRF umożliwiająca atakującym wywołanie żądań do dowolnych hostów.
Wyścig warunków w New API pozwala na sztuczne zwiększenie limitu użytkownika.
EspoCRM is an open source customer relationship management application. Prior to 10.0.2, an authenticated user with mass-update permission can supply a known attachment identifier to the mass-update functionality. The mass-update processor duplicates the attachment without checking whether the…
Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page. Attackers can register with the invitee's email using the exposed ID and accept it,…
Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuery. Its subscription hash omits constraints next to a $or operator, including the _Session owner filter and beforeSubscribe constraints, so distinct subscriptions are grouped…
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
W rclone przed wersją 1.75.0 występuje podatność na odmowę usługi, która może zatrzymać procesy.
A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repo_path of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been…
Wstrzyknięcie SQL w Corteza umożliwia nieautoryzowany dostęp do danych.
Błąd w better-auth umożliwia atakującym fałszowanie parametrów OAuth i przejmowanie sesji.
Błąd w Search Guard FLX umożliwia dostęp do wszystkich dokumentów z indeksów w sygnale.
OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same…
Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{erupt}. Attackers holding query permission on entities with String-keyed…
The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from disk, allowing users with a high-privilege custom role to perform path traversal, disclose the contents of JSON-parseable files anywhere on the server, and overwrite the GiveWP…
The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is a reserved internal name for Looker's internal MySQL database. The schemas parameter is vulnerable to SQL injection, enabling attackers to manipulate SELECT…
FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to suppress CredSSP credential delegation, sending the cleartext password to the RDP server. A compromised or man-in-the-middle destination host can decode…
WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via web_fetch or URL-based knowledge import to reach…
Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 (lib/ash/actions/aggregate.ex) applied only the root resource's read policy before running the…
The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of…
libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting values from key vault documents, KMS provider configuration and KMS responses into request lines, headers and signed request bodies without validating or encoding them for each context. A user with…
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, app.util.ssrf/blocked-address? relies on Java InetAddress predicates that do not classify NAT64, 6to4, or Teredo addresses and applies additional CIDR checks only to IPv4 values. Exploitation requires routing through a…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| W Beets przed wersją 2.10.0 wstrzyknięcie kodu HTML w interfejsie webowym umożliwia atak na DOM. | W Beets przed wersją 2.10.0 wstrzyknięcie kodu HTML w interfejsie webowym umożliwia atak na DOM. |
Do wiadomości | 6,0 | 0,3 % | ||
| Błąd w Electron umożliwia zdalne wykonanie kodu przez niewłaściwe zarządzanie oknami. | Błąd w Electron umożliwia zdalne wykonanie kodu przez niewłaściwe zarządzanie oknami. |
Do wiadomości | 6,0 | 0,3 % | ||
| LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. | LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels… |
Do wiadomości | 6,0 | 0,3 % | ||
| W BlenderMCP występuje luka w przechodzeniu ścieżek, umożliwiająca zapis dowolnych plików. | W BlenderMCP występuje luka w przechodzeniu ścieżek, umożliwiająca zapis dowolnych plików. |
Do wiadomości | 6,0 | 0,3 % | ||
| W ChurchCRM przed wersją 6.5.3 występuje podatność SSRF umożliwiająca atakującym wywołanie żądań do dowolnych hostów. | W ChurchCRM przed wersją 6.5.3 występuje podatność SSRF umożliwiająca atakującym wywołanie żądań do dowolnych hostów. |
Do wiadomości | 6,0 | 0,3 % | ||
| Wyścig warunków w New API pozwala na sztuczne zwiększenie limitu użytkownika. | Wyścig warunków w New API pozwala na sztuczne zwiększenie limitu użytkownika. |
Do wiadomości | 6,0 | 0,3 % | ||
| EspoCRM is an open source customer relationship management application. | EspoCRM is an open source customer relationship management application. Prior to 10.0.2, an authenticated user with mass-update permission can supply a known attachment identifier to the mass-update functionality. The mass-update processor duplicates the attachment without checking whether the… |
Do wiadomości | 6,0 | 0,29 % | ||
| Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain… | Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page. Attackers can register with the invitee's email using the exposed ID and accept it,… |
Do wiadomości | 6,0 | 0,29 % | ||
| Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuery. | Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuery. Its subscription hash omits constraints next to a $or operator, including the _Session owner filter and beforeSubscribe constraints, so distinct subscriptions are grouped… |
Do wiadomości | 6,0 | 0,29 % | ||
| Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network. | Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network. |
Do wiadomości | 5,9 | 0,78 % | ||
| W rclone przed wersją 1.75.0 występuje podatność na odmowę usługi, która może zatrzymać procesy. | W rclone przed wersją 1.75.0 występuje podatność na odmowę usługi, która może zatrzymać procesy. |
Do wiadomości | 6,0 | 0,29 % | ||
| A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. | A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repo_path of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been… |
Do wiadomości | 5,5 | 2,79 % | ||
| Wstrzyknięcie SQL w Corteza umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w Corteza umożliwia nieautoryzowany dostęp do danych. |
Do wiadomości | 6,0 | 0,28 % | ||
| Błąd w better-auth umożliwia atakującym fałszowanie parametrów OAuth i przejmowanie sesji. | Błąd w better-auth umożliwia atakującym fałszowanie parametrów OAuth i przejmowanie sesji. |
Do wiadomości | 6,0 | 0,28 % | ||
| Błąd w Search Guard FLX umożliwia dostęp do wszystkich dokumentów z indeksów w sygnale. | Błąd w Search Guard FLX umożliwia dostęp do wszystkich dokumentów z indeksów w sygnale. |
Do wiadomości | 6,0 | 0,28 % | ||
| OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-scoped media policy in the… | OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same… |
Do wiadomości | 6,0 | 0,28 % | ||
| Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by… | Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{erupt}. Attackers holding query permission on entities with String-keyed… |
Do wiadomości | 6,0 | 0,28 % | ||
| The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from disk, allowing… | The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from disk, allowing users with a high-privilege custom role to perform path traversal, disclose the contents of JSON-parseable files anywhere on the server, and overwrite the GiveWP… |
Do wiadomości | 6,0 | 0,28 % | ||
| The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is… | The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is a reserved internal name for Looker's internal MySQL database. The schemas parameter is vulnerable to SQL injection, enabling attackers to manipulate SELECT… |
Do wiadomości | 6,0 | 0,27 % | ||
| FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to… | FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to suppress CredSSP credential delegation, sending the cleartext password to the RDP server. A compromised or man-in-the-middle destination host can decode… |
Do wiadomości | 6,0 | 0,27 % | ||
| WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6… | WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via web_fetch or URL-based knowledge import to reach… |
Do wiadomości | 6,0 | 0,27 % | ||
| Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via… | Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 (lib/ash/actions/aggregate.ex) applied only the root resource's read policy before running the… |
Do wiadomości | 6,0 | 0,27 % | ||
| The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and… | The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of… |
Do wiadomości | 5,9 | 0,77 % | ||
| libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting values from key vault documents, KMS… | libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting values from key vault documents, KMS provider configuration and KMS responses into request lines, headers and signed request bodies without validating or encoding them for each context. A user with… |
Do wiadomości | 6,0 | 0,27 % | ||
| Penpot is an open-source design and prototyping platform. | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, app.util.ssrf/blocked-address? relies on Java InetAddress predicates that do not classify NAT64, 6to4, or Teredo addresses and applies additional CIDR checks only to IPv4 values. Exploitation requires routing through a… |
Do wiadomości | 6,0 | 0,27 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.