Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-only containment logic in its site UploaderHelper . The showImage action resolves a request-controlled path, calls that helper, and then returns the image. If image decoding is…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the serve_from argument to Files::new(), the mount path defaults to an empty path; the service then joins the request path with this empty path and…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization. The attack can be launched remotely. This attack is characterized by high…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determined Object Attributes, has been identified in the MXsecurity Series. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted JSON…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILE_DOWNLOAD_SIGN_SECRET constant. Attackers can compute HMAC-SHA256 signatures of guessed file ids offline to…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.
Summary
The arrayLimit option in qs did not enforce limits for bracket notation (a[]=1&a[]=2), only for indexed notation (a[0]=1). This is a consistency bug; arrayLimit should apply…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes `ExecuteReadOnlyWithTypedArguments` as a read-only execution mechanism. The hook saves the previous read-only state, sets `runtime.SetReadOnly(true)`, executes the destination context, and then…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map causes path traversal. The attack may be initiated remotely.…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.Authorize module) renders the user agent session binding inert, removing a defense in depth control against replay of a stolen session.
This vulnerability is associated with program files…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Summary
Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI (session.req_header().uri) saw the :authority value, but the upstream received the client-supplied Host…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan_folder endpoint that accepts attacker-controlled scan_path parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-only containment logic in its site UploaderHelper . The showImage action resolves a request-controlled path, calls that helper, and then returns the image. If image decoding is…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the serve_from argument to Files::new(), the mount path defaults to an empty path; the service then joins the request path with this empty path and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization. The attack can be launched remotely. This attack is characterized by high…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determined Object Attributes, has been identified in the MXsecurity Series. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted JSON…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILE_DOWNLOAD_SIGN_SECRET constant. Attackers can compute HMAC-SHA256 signatures of guessed file ids offline to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.
Summary
The arrayLimit option in qs did not enforce limits for bracket notation (a[]=1&a[]=2), only for indexed notation (a[0]=1). This is a consistency bug; arrayLimit should apply…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes `ExecuteReadOnlyWithTypedArguments` as a read-only execution mechanism. The hook saves the previous read-only state, sets `runtime.SetReadOnly(true)`, executes the destination context, and then…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map causes path traversal. The attack may be initiated remotely.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.Authorize module) renders the user agent session binding inert, removing a defense in depth control against replay of a stolen session.
This vulnerability is associated with program files…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Summary
Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI (session.req_header().uri) saw the :authority value, but the upstream received the client-supplied Host…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan_folder endpoint that accepts attacker-controlled scan_path parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,44 % · rekomendacja wg zapisanej polityki