KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5.
Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user can overwrite an existing S3 object belonging to another upload collection when client uploads are enabled for…
Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.
In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lookzy: from n/a through 1.1.14.
DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability.
Błąd w Hono pozwala na uwierzytelnienie z użyciem JWT bez poprawnego schematu Bearer.
1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies (TrustedProxies = 0.0.0.0/0), allowing any client to spoof the X-Forwarded-For header. Since all IP-based access…
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization flaw in the comment creation endpoint allows authenticated users to impersonate any other user by altering the authorName field in the API request. This enables attackers to post comments…
tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file containing a sub-atom with a size of zero inside a ---- atom can cause the metadata parser to stop advancing through the input. The custom-field atom traversal repeatedly processes the malformed…
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that…
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences an optional colorScale child without validating malformed rule structure. GetConditionalFormats reaches…
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a user who can query a collection with a polymorphic join to sensitive fields can infer hidden or read-restricted values, including password-reset…
Missing Authorization vulnerability in Jegstudio Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons gutenverse-news allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons:…
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer…
A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability.
Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by sensitive information exposure in scaffolder task logs. An authenticated user who can create and read scaffolder tasks may be able to observe sensitive…
Błąd odczytu poza zakresem w Skia w Google Chrome umożliwia zdalnemu atakującemu odczyt pamięci.
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible…
Zmiana URL integracji w JetBrains YouTrack ujawnia zapisane dane uwierzytelniające.
Brak uwierzytelnienia w LaSuite Doc pozwala na enumerację publicznych dokumentów.
Dereferencja wskaźnika NULL w mruby umożliwia awarię aplikacji.
Błąd walidacji nagłówka Transfer-Encoding w Netty umożliwia ataki smugglingu żądań.
Błąd autoryzacji w Google Chrome umożliwia zdalnemu atakującemu obejście polityki pochodzenia.
Wycieki informacji w Google Chrome umożliwiają atakującemu obejście izolacji stron.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows… | Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5. |
Do wiadomości | 6,5 | 0,25 % | ||
| Payload is a free and open source headless content management system. | Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user can overwrite an existing S3 object belonging to another upload collection when client uploads are enabled for… |
Do wiadomości | 6,5 | 0,25 % | ||
| Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions. | Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions. |
Do wiadomości | 6,5 | 0,25 % | ||
| In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. | In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
Do wiadomości | 6,5 | 0,25 % | ||
| Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Control Security… | Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lookzy: from n/a through 1.1.14. |
Do wiadomości | 6,5 | 0,25 % | ||
| DoS vulnerability in the vibration service. | DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability. |
Do wiadomości | 6,5 | 0,25 % | ||
| Błąd w Hono pozwala na uwierzytelnienie z użyciem JWT bez poprawnego schematu Bearer. | Błąd w Hono pozwala na uwierzytelnienie z użyciem JWT bez poprawnego schematu Bearer. |
Do wiadomości | 6,5 | 0,25 % | ||
| 1Panel is an open-source, web-based control panel for Linux server management. | 1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies (TrustedProxies = 0.0.0.0/0), allowing any client to spoof the X-Forwarded-For header. Since all IP-based access… |
Do wiadomości | 6,5 | 0,25 % | ||
| Rallly is an open-source scheduling and collaboration tool. | Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization flaw in the comment creation endpoint allows authenticated users to impersonate any other user by altering the authorName field in the API request. This enables attackers to post comments… |
Do wiadomości | 6,5 | 0,25 % | ||
| tinytag is a Python library for reading audio file metadata. | tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file containing a sub-atom with a size of zero inside a ---- atom can cause the metadata parser to stop advancing through the input. The custom-field atom traversal repeatedly processes the malformed… |
Do wiadomości | 6,5 | 0,25 % | ||
| Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that… |
Do wiadomości | 6,5 | 0,25 % | ||
| Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences an optional colorScale child without validating malformed rule structure. GetConditionalFormats reaches… |
Do wiadomości | 6,5 | 0,25 % | ||
| Payload is a free and open source headless content management system. | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a user who can query a collection with a polymorphic join to sensitive fields can infer hidden or read-restricted values, including password-reset… |
Do wiadomości | 6,5 | 0,25 % | ||
| Missing Authorization vulnerability in Jegstudio Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons gutenverse-news… | Missing Authorization vulnerability in Jegstudio Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons gutenverse-news allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons:… |
Do wiadomości | 6,5 | 0,25 % | ||
| An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet… | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer… |
Do wiadomości | 6,5 | 0,25 % | ||
| A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). | A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability. |
Do wiadomości | 6,5 | 0,25 % | ||
| Backstage is an open framework for building developer portals. | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by sensitive information exposure in scaffolder task logs. An authenticated user who can create and read scaffolder tasks may be able to observe sensitive… |
Do wiadomości | 6,5 | 0,25 % | ||
| Błąd odczytu poza zakresem w Skia w Google Chrome umożliwia zdalnemu atakującemu odczyt pamięci. | Błąd odczytu poza zakresem w Skia w Google Chrome umożliwia zdalnemu atakującemu odczyt pamięci. |
Do wiadomości | 6,5 | 0,25 % | ||
| The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all… | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible… |
Do wiadomości | 6,5 | 0,25 % | ||
| Zmiana URL integracji w JetBrains YouTrack ujawnia zapisane dane uwierzytelniające. | Zmiana URL integracji w JetBrains YouTrack ujawnia zapisane dane uwierzytelniające. |
Do wiadomości | 6,5 | 0,25 % | ||
| Brak uwierzytelnienia w LaSuite Doc pozwala na enumerację publicznych dokumentów. | Brak uwierzytelnienia w LaSuite Doc pozwala na enumerację publicznych dokumentów. |
Do wiadomości | 6,5 | 0,25 % | ||
| Dereferencja wskaźnika NULL w mruby umożliwia awarię aplikacji. | Dereferencja wskaźnika NULL w mruby umożliwia awarię aplikacji. |
Do wiadomości | 6,5 | 0,25 % | ||
| Błąd walidacji nagłówka Transfer-Encoding w Netty umożliwia ataki smugglingu żądań. | Błąd walidacji nagłówka Transfer-Encoding w Netty umożliwia ataki smugglingu żądań. |
Do wiadomości | 6,5 | 0,25 % | ||
| Błąd autoryzacji w Google Chrome umożliwia zdalnemu atakującemu obejście polityki pochodzenia. | Błąd autoryzacji w Google Chrome umożliwia zdalnemu atakującemu obejście polityki pochodzenia. |
Do wiadomości | 6,5 | 0,25 % | ||
| Wycieki informacji w Google Chrome umożliwiają atakującemu obejście izolacji stron. | Wycieki informacji w Google Chrome umożliwiają atakującemu obejście izolacji stron. |
Do wiadomości | 6,5 | 0,25 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.