Baza CVE

An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior, specifically within the field data parsing logic in…

An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11.  The host streaming API function {{coines_read_stream_sensor_data()}} fails to validate the boundaries…

Błąd w skupper-router Red Hat Service Interconnect powoduje awarię i odmowę usługi.

A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption process fails to check if a…

A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected…

An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature.

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled…

Eskalacja uprawnień w Palo Alto Cortex XDR umożliwia zdalne wykonanie kodu z uprawnieniami roota.

The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds the name of the option to write from user input, allowing users with a…

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

Refleksyjny atak XSS w Form Maker 10Web pozwala na wstrzyknięcie skryptów przez nieautoryzowanych użytkowników.

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls…

Wielokrotne luki w podnoszeniu uprawnień w aplikacji GlobalProtect umożliwiają lokalnemu użytkownikowi eskalację uprawnień do SYSTEM na Windows oraz…

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the…

Wstrzyknięcie poleceń w PAN-OS umożliwia administratorowi wykonanie dowolnych komend jako root.

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma…

Deserializacja parametrów w Apache Artemis może prowadzić do odmowy usługi przez nadmierne obciążenie.

Wykorzystanie złośliwych wildcardów w Apache Artemis prowadzi do odmowy usługi.

The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the control_selectors meta field in all versions up to, and including, 2.0.4. This is due to the…

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to…

Brak weryfikacji uprawnień w wtyczce Builderall Cheetah umożliwia atakującym modyfikację danych.

Wtyczka WP BackItUp umożliwia atakującym odczyt wrażliwych plików na serwerze.

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that…

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bg_video_service_url' Setting in all versions up to, and including, 3.0.2 due to…

Obejście autoryzacji w BurgerEditor umożliwia atakującemu modyfikację treści strony.