Podatności

Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer 6.3.4 and 6.3.5 allow a local attacker who already runs code as the low-privilege service account to escalate privilege. On Windows,…

CVSS 6,7 · EPSS 0,07 % · rekomendacja wg zapisanej polityki

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

CVSS 6,7 · EPSS 0,07 % · rekomendacja wg zapisanej polityki

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

CVSS 6,7 · EPSS 0,07 % · rekomendacja wg zapisanej polityki

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

CVSS 6,7 · EPSS 0,07 % · rekomendacja wg zapisanej polityki

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

CVSS 6,7 · EPSS 0,07 % · rekomendacja wg zapisanej polityki

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

CVSS 6,7 · EPSS 0,07 % · rekomendacja wg zapisanej polityki

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.

CVSS 6,7 · rekomendacja wg zapisanej polityki

The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code…

CVSS 6,6 · EPSS 0,42 % · rekomendacja wg zapisanej polityki

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get_instance_css function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary…

CVSS 6,5 · EPSS 0,73 % · rekomendacja wg zapisanej polityki

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name} endpoint calls SessionManager.get_result_by_task() in ufo/server/services/session_manager.py, which acquires a non-reentrant lock and then calls…

CVSS 6,5 · EPSS 0,69 % · rekomendacja wg zapisanej polityki

Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any bound on how much will be accepted, so a single request can cause the server to allocate memory in proportion to its size, exhausting the Java heap…

CVSS 6,5 · EPSS 0,69 % · rekomendacja wg zapisanej polityki

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.

CVSS 6,5 · EPSS 0,66 % · rekomendacja wg zapisanej polityki

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint.

CVSS 6,5 · EPSS 0,63 % · rekomendacja wg zapisanej polityki

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

CVSS 6,6 · EPSS 0,06 % · rekomendacja wg zapisanej polityki

Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article image metadata is used to construct a filesystem path and is passed to `unlink()` without path traversal or directory…

CVSS 6,5 · EPSS 0,53 % · rekomendacja wg zapisanej polityki

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.

CVSS 6,5 · EPSS 0,48 % · rekomendacja wg zapisanej polityki

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to exposure of sensitive information to an unauthorized actor.

CVSS 6,5 · EPSS 0,47 % · rekomendacja wg zapisanej polityki

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.

CVSS 6,5 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that…

CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, web_fetch_tool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls.…

CVSS 6,5 · EPSS 0,43 % · rekomendacja wg zapisanej polityki

A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative…

CVSS 6,5 · EPSS 0,43 % · rekomendacja wg zapisanej polityki

vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multimodal LRU cache can commit a media hash in the frontend sender cache during multimodal rendering and before engine admission, while the engine receiver cache never receives the payload if…

CVSS 6,5 · EPSS 0,43 % · rekomendacja wg zapisanej polityki

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and…

CVSS 6,5 · EPSS 0,42 % · rekomendacja wg zapisanej polityki

Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.

CVSS 6,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated…

CVSS 6,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki