KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Brak ograniczeń w Frappe pozwala na wykorzystanie uprawnień ofiary do akceptacji workflow.
Brak walidacji nagłówków HTTP w MCP Ruby SDK umożliwia atak DNS rebinding na lokalny serwer.
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2.
Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive Data.This issue affects QA Analytics: from n/a through 5.3.0.0.
An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue.
The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it.
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target…
Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet…
The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data from other running preprocessors not available to said administrator.
Podatność w go-chi/chi umożliwia spoofing IP, co może prowadzić do obejścia kontroli dostępu.
Wykorzystanie podatności SSRF w Craft CMS pozwala na ujawnienie wewnętrznych treści HTTP.
Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper::getAjax(), wired through Joomla’s core com_ajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to…
An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local".
Luka ujawnienia informacji w Petlibro Smart Pet Feeder pozwala na dostęp do prywatnych nagrań audio.
Wstrzyknięcie formuły w Poweradmin umożliwia wykonanie złośliwego kodu w arkuszach kalkulacyjnych.
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in access controls over privileged system configuration operations on the FSP. An attacker with authenticated administrator-level access to…
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected and publish-disabled documents by querying a published document. Attackers can send POST requests to /api/block/getDocInfo…
Brak tokenów CSRF w skryptach PHP Jabbers umożliwia nieautoryzowane działania administracyjne.
Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint lacked ACL checks, allowing unauthorized tag modifications by unauthenticated users.
Uszkodzenie pamięci podczas przetwarzania spreparowanego pliku ELF w Primary Bootloader prowadzi do zdalnego wykonania kodu.
Luka w Nebula Mesh pozwala na ataki XSS i nieautoryzowane wylogowanie przez złośliwe strony.
Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - The file upload endpoint accepted POST requests from unauthenticated visitors with no CSRF token. Compounding this, the installer manifest omitted…
Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently…
hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARGE, ~16 MB), the function sequentially appends the username, separator, hash, and plaintext via memcpy without…
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Brak ograniczeń w Frappe pozwala na wykorzystanie uprawnień ofiary do akceptacji workflow. | Brak ograniczeń w Frappe pozwala na wykorzystanie uprawnień ofiary do akceptacji workflow. |
Do wiadomości | 6,9 | 0,26 % | ||
| Brak walidacji nagłówków HTTP w MCP Ruby SDK umożliwia atak DNS rebinding na lokalny serwer. | Brak walidacji nagłówków HTTP w MCP Ruby SDK umożliwia atak DNS rebinding na lokalny serwer. |
Do wiadomości | 6,9 | 0,26 % | ||
| Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows… | Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2. |
Do wiadomości | 6,9 | 0,25 % | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded… | Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive Data.This issue affects QA Analytics: from n/a through 5.3.0.0. |
Do wiadomości | 6,9 | 0,25 % | ||
| An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly… | An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue. |
Do wiadomości | 6,9 | 0,25 % | ||
| The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. | The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it. |
Do wiadomości | 6,9 | 0,25 % | ||
| OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside… | OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target… |
Do wiadomości | 6,9 | 0,25 % | ||
| Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only)… | Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet… |
Do wiadomości | 6,9 | 0,24 % | ||
| The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap… | The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data from other running preprocessors not available to said administrator. |
Do wiadomości | 6,9 | 0,24 % | ||
| Podatność w go-chi/chi umożliwia spoofing IP, co może prowadzić do obejścia kontroli dostępu. | Podatność w go-chi/chi umożliwia spoofing IP, co może prowadzić do obejścia kontroli dostępu. |
Do wiadomości | 6,9 | 0,24 % | ||
| Wykorzystanie podatności SSRF w Craft CMS pozwala na ujawnienie wewnętrznych treści HTTP. | Wykorzystanie podatności SSRF w Craft CMS pozwala na ujawnienie wewnętrznych treści HTTP. |
Do wiadomości | 6,9 | 0,24 % | ||
| Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper::getAjax(),… | Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper::getAjax(), wired through Joomla’s core com_ajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to… |
Do wiadomości | 6,9 | 0,24 % | ||
| An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public… | An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local". |
Do wiadomości | 6,9 | 0,23 % | ||
| Luka ujawnienia informacji w Petlibro Smart Pet Feeder pozwala na dostęp do prywatnych nagrań audio. | Luka ujawnienia informacji w Petlibro Smart Pet Feeder pozwala na dostęp do prywatnych nagrań audio. |
Do wiadomości | 6,9 | 0,23 % | ||
| Wstrzyknięcie formuły w Poweradmin umożliwia wykonanie złośliwego kodu w arkuszach kalkulacyjnych. | Wstrzyknięcie formuły w Poweradmin umożliwia wykonanie złośliwego kodu w arkuszach kalkulacyjnych. |
Do wiadomości | 6,9 | 0,23 % | ||
| IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected… | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in access controls over privileged system configuration operations on the FSP. An attacker with authenticated administrator-level access to… |
Do wiadomości | 6,9 | 0,22 % | ||
| SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and… | SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected and publish-disabled documents by querying a published document. Attackers can send POST requests to /api/block/getDocInfo… |
Do wiadomości | 6,9 | 0,22 % | ||
| Brak tokenów CSRF w skryptach PHP Jabbers umożliwia nieautoryzowane działania administracyjne. | Brak tokenów CSRF w skryptach PHP Jabbers umożliwia nieautoryzowane działania administracyjne. |
Do wiadomości | 6,9 | 0,22 % | ||
| Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint lacked ACL checks,… | Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint lacked ACL checks, allowing unauthorized tag modifications by unauthenticated users. |
Do wiadomości | 6,9 | 0,22 % | ||
| Uszkodzenie pamięci podczas przetwarzania spreparowanego pliku ELF w Primary Bootloader prowadzi do zdalnego wykonania kodu. | Uszkodzenie pamięci podczas przetwarzania spreparowanego pliku ELF w Primary Bootloader prowadzi do zdalnego wykonania kodu. |
Do wiadomości | 6,9 | 0,22 % | ||
| Luka w Nebula Mesh pozwala na ataki XSS i nieautoryzowane wylogowanie przez złośliwe strony. | Luka w Nebula Mesh pozwala na ataki XSS i nieautoryzowane wylogowanie przez złośliwe strony. |
Do wiadomości | 6,9 | 0,22 % | ||
| Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20,… | Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - The file upload endpoint accepted POST requests from unauthenticated visitors with no CSRF token. Compounding this, the installer manifest omitted… |
Do wiadomości | 6,9 | 0,21 % | ||
| Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes… | Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as a currently… |
Do wiadomości | 6,9 | 0,21 % | ||
| hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. | hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARGE, ~16 MB), the function sequentially appends the username, separator, hash, and plaintext via memcpy without… |
Do wiadomości | 6,9 | 0,21 % | ||
| Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in ABB Terra AC wallbox.This issue affects Terra AC… | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33. |
Do wiadomości | 6,9 | 0,21 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.