Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler that allows low-privileged authenticated users to read any message push record. Attackers can supply arbitrary record ids to GET /sys/message/sysMessage/queryById to disclose…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler that allows any authenticated user to export AI evaluator data. Low-privileged attackers can request /airag/extData/exportXls to download every user's airag_ext_data evaluator…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' AI voice generation history via the userId parameter of GET /airag/voice/listByUser. Attackers who know another user's id can retrieve submitted text-to-speech…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters. Attackers can send crafted links to authenticated users, breaking out of unencoded inline JavaScript string…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /generate-pdf endpoint. Attackers can embed inline img elements in report_content…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page.
This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page.
This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE CASCADE. Attackers with delete permission on a referenced table can delete a record whose cascade disables permission…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler that allows any authenticated user to import category dictionary entries. Low-privileged attackers can upload crafted Excel workbooks to bulk insert arbitrary nodes into the…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in SysUserController. Attackers can send DELETE requests with arbitrary groupId and userId values to remove any user…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create department permission bindings via POST /sys/sysDepartPermission/add. Attackers can submit arbitrary departId, permissionId and dataRuleIds fields to attach menu, button…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any authenticated user to import departments. Low-privileged attackers can upload a crafted Excel workbook to POST /sys/sysDepart/appImportExcel to create arbitrary…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissionController that allows any authenticated user to modify department data rules. Low-privileged attackers can send departId, permissionId and dataRuleIds to POST…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message templates via PUT /sys/message/sysMessageTemplate/edit. Attackers can obtain template ids from the unguarded list endpoint and overwrite system notification…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handler that allows any authenticated user to modify organizational positions. Low-privileged attackers can obtain position ids from the unguarded list endpoint and send PUT or POST requests to…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI voice records by supplying an arbitrary userId to DELETE /airag/voice/deleteVoiceRecord. Attackers can obtain record ids from the unchecked GET…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow email notifications. A disabled user who previously followed documents continues to receive email updates about activity on those documents after their access…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the blit clamp in gdiVideoShowSurface() wraps in 32-bit arithmetic and is skipped. A malicious RDP server can send a negative topLevelLeft to clients connecting…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and including, 3.1.13 due to insufficient escaping on the user supplied parameter and…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unassigned warehouses by supplying depotId or depotIds request parameters. When depot_flag warehouse restriction is enabled, attackers can name arbitrary warehouse ids in endpoints…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
CVSS
5,3
EPSS
0,23 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler that allows low-privileged authenticated users to read any message push record. Attackers can supply arbitrary record ids to GET /sys/message/sysMessage/queryById to disclose…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler that allows any authenticated user to export AI evaluator data. Low-privileged attackers can request /airag/extData/exportXls to download every user's airag_ext_data evaluator…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' AI voice generation history via the userId parameter of GET /airag/voice/listByUser. Attackers who know another user's id can retrieve submitted text-to-speech…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters. Attackers can send crafted links to authenticated users, breaking out of unencoded inline JavaScript string…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /generate-pdf endpoint. Attackers can embed inline img elements in report_content…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page.
This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page.
This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE CASCADE. Attackers with delete permission on a referenced table can delete a record whose cascade disables permission…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler that allows any authenticated user to import category dictionary entries. Low-privileged attackers can upload crafted Excel workbooks to bulk insert arbitrary nodes into the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in SysUserController. Attackers can send DELETE requests with arbitrary groupId and userId values to remove any user…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create department permission bindings via POST /sys/sysDepartPermission/add. Attackers can submit arbitrary departId, permissionId and dataRuleIds fields to attach menu, button…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any authenticated user to import departments. Low-privileged attackers can upload a crafted Excel workbook to POST /sys/sysDepart/appImportExcel to create arbitrary…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissionController that allows any authenticated user to modify department data rules. Low-privileged attackers can send departId, permissionId and dataRuleIds to POST…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message templates via PUT /sys/message/sysMessageTemplate/edit. Attackers can obtain template ids from the unguarded list endpoint and overwrite system notification…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handler that allows any authenticated user to modify organizational positions. Low-privileged attackers can obtain position ids from the unguarded list endpoint and send PUT or POST requests to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI voice records by supplying an arbitrary userId to DELETE /airag/voice/deleteVoiceRecord. Attackers can obtain record ids from the unchecked GET…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow email notifications. A disabled user who previously followed documents continues to receive email updates about activity on those documents after their access…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the blit clamp in gdiVideoShowSurface() wraps in 32-bit arithmetic and is skipped. A malicious RDP server can send a negative topLevelLeft to clients connecting…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and including, 3.1.13 due to insufficient escaping on the user supplied parameter and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unassigned warehouses by supplying depotId or depotIds request parameters. When depot_flag warehouse restriction is enabled, attackers can name arbitrary warehouse ids in endpoints…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
5,3
0,23 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.