Baza CVE

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/(shareLayout)/components/splash.tsx of the component Splash Layout.…

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/(shareLayout)/webapp-signin/components/mail-and-p…

Manipulacja argumentem initial_balance w HKUDS AI-Trader prowadzi do błędów logiki biznesowej.

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom…

Nieprawidłowe ograniczenie referencji XML w XG VisionTerminal umożliwia ujawnienie wrażliwych danych.

Joomla Extension - j2commerce.com - Reflected XSS via `filter_tag`, `pricefrom` and `priceto` in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - Four task handlers accepted a…

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged remote attacker could potentially…

Błąd autoryzacji w Dell PowerProtect Data Manager umożliwia obejście mechanizmu ochrony.

Przepełnienie bufora w gfs2-utils może ujawniać wrażliwe dane lub powodować awarię.

Przepełnienie stosu w gfs2-utils prowadzi do odmowy usługi przy przetwarzaniu złośliwych obrazów systemu plików GFS2.

Przepełnienie stosu w gfs2-utils prowadzi do odmowy usługi przy przetwarzaniu złośliwego obrazu.

Wykorzystanie podatności w Dell PowerProtect Data Manager pozwala na przeprowadzenie ataków phishingowych.

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the Social Media Follow module in all versions up to, and including,…

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in…

Przechowywanie haseł w czystym tekście w OptimiDoc Server umożliwia ujawnienie danych uwierzytelniających.

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue.…

Wykrycie w SysPasswordDxe w InsydeH2O ujawnia hashe haseł, co prowadzi do eskalacji uprawnień.

Błąd w obsłudze zmiennej UEFI PlatformLangCodes może prowadzić do przepełnienia bufora i wyczerpania zasobów.

A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file code_agent.py of the component CodeAgent. Such manipulation leads to denial…

Manipulacja argumentem img_bytes w simular-ai Agent-S prowadzi do zużycia zasobów.

A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated GUI Action…

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec of the file crates/openfang-runtime/src/tool_runner.rs. This…

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler.…

A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.json of the file apps/rowboat/app/api/composio/webhook/route.ts of…

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory…