Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user to delete other users' legacy AppKeys by supplying a numeric apiId. Attackers can iterate sequential key IDs against DELETE /v1/appspace/app/key to revoke AppKeys across…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Contributor-level access…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete of the component Credentials Handler. This manipulation of the argument teamId causes improper privilege management. The…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 6.88 due to insufficient input sanitization and output escaping. This makes it possible for…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /api/v1/preview and /api/v1/preview/generate handlers without permission checks. Attackers holding even a settings:read-scoped API key can stage…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to delete other administrators' files via POST /networkDisk/deleteFile and batchDeleteFile. Attackers can supply another administrator's file or folder uid, which…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbitrary apps via the unpublish endpoint. Attackers can supply a target appId and appType from the exploration marketplace to delete other…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by uploading attachments with an attacker-supplied Content-Type. Attackers can upload a file declared as text/html, which UploadShowAction serves inline, and share…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalidated URLs into anchor href attributes. Authenticated attackers can post messages with javascript: links or quote-breaking URLs to…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that allows any authenticated user to delete message templates. Low-privileged attackers can obtain template ids from the unguarded list endpoint and delete shipped…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged authenticated users to delete message records. Attackers can send DELETE requests with arbitrary id values to remove any sys_sms row, erasing records of sent…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin handler that allows any authenticated user to purge AI prompt templates. Low-privileged attackers can send DELETE requests with prompt template ids to permanently remove…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/deleteTenantPackUser. Attackers can supply arbitrary userId and packId values in the request body to remove any user…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled server_id and loads the server without restricting the lookup to servers owned by the authenticated account. On installations…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_lists.rs) depend only on the shared AccessSmartList permission and resolve the target list at Reader access (lacking a creator check). Any authenticated user with that permission…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GenerateShortToken creates standalone short-token records without a long Token value, but DeleteUserTokens invalidates cached entries only when the long Token field is nonempty. A revoked short token can therefore remain in…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability.
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer's isHrefSafeValue() validates an SVG href after XML DTD entity expansion, but saveXML() serializes the original entity reference after removing the DTD declaration. A crafted entity such as Tab can appear to the sanitizer as…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, users who can manage events or create content, including speakers who can upload material, can store crafted javascript URLs in fields that accept custom URLs. A user…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2.
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker with low privileges who can influence a…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
CVSS
5,4
EPSS
0,18 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user to delete other users' legacy AppKeys by supplying a numeric apiId. Attackers can iterate sequential key IDs against DELETE /v1/appspace/app/key to revoke AppKeys across…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Contributor-level access…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete of the component Credentials Handler. This manipulation of the argument teamId causes improper privilege management. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 6.88 due to insufficient input sanitization and output escaping. This makes it possible for…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /api/v1/preview and /api/v1/preview/generate handlers without permission checks. Attackers holding even a settings:read-scoped API key can stage…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to delete other administrators' files via POST /networkDisk/deleteFile and batchDeleteFile. Attackers can supply another administrator's file or folder uid, which…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbitrary apps via the unpublish endpoint. Attackers can supply a target appId and appType from the exploration marketplace to delete other…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by uploading attachments with an attacker-supplied Content-Type. Attackers can upload a file declared as text/html, which UploadShowAction serves inline, and share…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalidated URLs into anchor href attributes. Authenticated attackers can post messages with javascript: links or quote-breaking URLs to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that allows any authenticated user to delete message templates. Low-privileged attackers can obtain template ids from the unguarded list endpoint and delete shipped…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged authenticated users to delete message records. Attackers can send DELETE requests with arbitrary id values to remove any sys_sms row, erasing records of sent…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin handler that allows any authenticated user to purge AI prompt templates. Low-privileged attackers can send DELETE requests with prompt template ids to permanently remove…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/deleteTenantPackUser. Attackers can supply arbitrary userId and packId values in the request body to remove any user…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled server_id and loads the server without restricting the lookup to servers owned by the authenticated account. On installations…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_lists.rs) depend only on the shared AccessSmartList permission and resolve the target list at Reader access (lacking a creator check). Any authenticated user with that permission…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GenerateShortToken creates standalone short-token records without a long Token value, but DeleteUserTokens invalidates cached entries only when the long Token field is nonempty. A revoked short token can therefore remain in…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer's isHrefSafeValue() validates an SVG href after XML DTD entity expansion, but saveXML() serializes the original entity reference after removing the DTD declaration. A crafted entity such as Tab can appear to the sanitizer as…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, users who can manage events or create content, including speakers who can upload material, can store crafted javascript URLs in fields that accept custom URLs. A user…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker with low privileges who can influence a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
5,4
0,18 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.