Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage() function. This makes it possible for unauthenticated attackers to update…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that writes past the fixed databuf[2048] array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. Attackers can supply a crafted .sf2 file with out-of-range pgen/igen operator values to write chosen…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datum_size smaller than the 36-byte AES-CCM header,…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets (concrete and abstract). This allows an easy sandbox escape by talking to the per-user systemd dbus socket. Version…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage() function. This makes it possible for unauthenticated attackers to update…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that writes past the fixed databuf[2048] array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. Attackers can supply a crafted .sf2 file with out-of-range pgen/igen operator values to write chosen…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datum_size smaller than the 36-byte AES-CCM header,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets (concrete and abstract). This allows an easy sandbox escape by talking to the per-user systemd dbus socket. Version…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki