Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
SurrealDB before v2.6.1 (and before v3.0.0-beta.3) contains a denial of service vulnerability in its embedded JavaScript scripting engine, which is enabled via the --allow-scripting capability (disabled by default). Any user able to execute arbitrary queries — including unauthenticated guests when…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service due to insufficient resource allocation limits when retrieving notes under certain…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Citizen from 3.3.0 to 3.9.0 are vulnerable to stored cross-site scripting in the sticky header button message handling. In stickyHeader.js the copyButtonAttributes function assigns innerHTML from a source element’s…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/{vhost}/{name}…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vulnerability that can lead to denial of service via <track src>. Version 1.27.1 patches the issue.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
SurrealDB before v2.6.1 (and before v3.0.0-beta.3) contains a denial of service vulnerability in its embedded JavaScript scripting engine, which is enabled via the --allow-scripting capability (disabled by default). Any user able to execute arbitrary queries — including unauthenticated guests when…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service due to insufficient resource allocation limits when retrieving notes under certain…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Citizen from 3.3.0 to 3.9.0 are vulnerable to stored cross-site scripting in the sticky header button message handling. In stickyHeader.js the copyButtonAttributes function assigns innerHTML from a source element’s…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/{vhost}/{name}…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vulnerability that can lead to denial of service via <track src>. Version 1.27.1 patches the issue.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,44 % · rekomendacja wg zapisanej polityki