Baza CVE

Przepełnienie stosu w gfs2-utils prowadzi do odmowy usługi przy przetwarzaniu złośliwego obrazu.

Wykorzystanie podatności w Dell PowerProtect Data Manager pozwala na przeprowadzenie ataków phishingowych.

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the Social Media Follow module in all versions up to, and including,…

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in…

Przechowywanie haseł w czystym tekście w OptimiDoc Server umożliwia ujawnienie danych uwierzytelniających.

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue.…

Wykrycie w SysPasswordDxe w InsydeH2O ujawnia hashe haseł, co prowadzi do eskalacji uprawnień.

Błąd w obsłudze zmiennej UEFI PlatformLangCodes może prowadzić do przepełnienia bufora i wyczerpania zasobów.

A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file code_agent.py of the component CodeAgent. Such manipulation leads to denial…

Manipulacja argumentem img_bytes w simular-ai Agent-S prowadzi do zużycia zasobów.

A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated GUI Action…

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec of the file crates/openfang-runtime/src/tool_runner.rs. This…

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler.…

A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.json of the file apps/rowboat/app/api/composio/webhook/route.ts of…

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory…

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after the…

Wtyczka SEOWriting dla WordPressa ma lukę XSS, umożliwiającą atakującym wstrzykiwanie złośliwego JavaScriptu.

W UpSignOn dla Windows występuje ujawnienie danych, umożliwiające lokalnym atakującym odzyskanie hasła głównego.

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows…

A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xml of the component Admin Console/DPO Compliance…

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the component Bootstrap Setup Endpoint. The…

Luka w tsi-coop tsi-dpdp-cms umożliwia zdalne obejście zabezpieczeń po stronie klienta.

A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file…

HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src/httpx2/httpx2/_sse.py repeatedly copies and rescans buffered text…

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.render_headers() in src/httpx2/httpx2/_multipart.py directly interpolates attacker-controlled content_type…