Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition undergoing iSCSI SAN…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP() to infer database contents. Successful exploitation may lead to full database compromise, especially…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 1.58.1. This is due to the forminator_replace_quiz_form_data() helper invoking do_shortcode() on the fully expanded…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following version:
File Station 5…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following version:
File Station 5…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following version:
File Station 5…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but does not verify that the caller-selected page-id belongs to the link's authorized pages set. An attacker with both a valid share link and…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition undergoing iSCSI SAN…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP() to infer database contents. Successful exploitation may lead to full database compromise, especially…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 1.58.1. This is due to the forminator_replace_quiz_form_data() helper invoking do_shortcode() on the fully expanded…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following version:
File Station 5…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following version:
File Station 5…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following version:
File Station 5…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but does not verify that the caller-selected page-id belongs to the link's authorized pages set. An attacker with both a valid share link and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki