Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The Ace User Management WordPress plugin through 2.0.3 does not properly validate that a password reset token is associated with the user who requested it, allowing any authenticated users, such as subscriber to reset the password of arbitrary accounts, including administrators.
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its checkout-related AJAX actions, allowing attackers to conduct reflected XSS attacks against logged-in users.
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before using it in a SQL statement, allowing users with a role as low as subscriber to perform blind SQL injection attacks and read arbitrary data from the database. Version 2.0.18 removed…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The Ace User Management WordPress plugin through 2.0.3 does not properly validate that a password reset token is associated with the user who requested it, allowing any authenticated users, such as subscriber to reset the password of arbitrary accounts, including administrators.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its checkout-related AJAX actions, allowing attackers to conduct reflected XSS attacks against logged-in users.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before using it in a SQL statement, allowing users with a role as low as subscriber to perform blind SQL injection attacks and read arbitrary data from the database. Version 2.0.18 removed…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,18 % · rekomendacja wg zapisanej polityki