Podatności

ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET parameter. Attackers can send crafted flagged_item.php?type= links to logged-in administrators or moderators to execute injected script in the admin…

CVSS 5,1 · rekomendacja wg zapisanej polityki

BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenticated organization members to inject markup into custom-template invoice PDFs. Attackers can place HTML and CSS in notes, terms, client name or address fields to overlay totals,…

CVSS 5,1 · rekomendacja wg zapisanej polityki

A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system.

CVSS 5,0 · EPSS 0,47 % · rekomendacja wg zapisanej polityki

Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVSS 4,9 · EPSS 0,88 % · rekomendacja wg zapisanej polityki

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of…

CVSS 4,9 · EPSS 0,73 % · rekomendacja wg zapisanej polityki

Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13.

CVSS 5,0 · EPSS 0,21 % · rekomendacja wg zapisanej polityki

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSD_Menus_IX_CSV::import function in all versions up to, and including, 6.1.2 This makes it possible for…

CVSS 4,9 · EPSS 0,64 % · rekomendacja wg zapisanej polityki

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

CVSS 4,9 · EPSS 0,61 % · rekomendacja wg zapisanej polityki

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 4,9 · EPSS 0,54 % · rekomendacja wg zapisanej polityki

The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…

CVSS 4,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.

CVSS 4,9 · EPSS 0,41 % · rekomendacja wg zapisanej polityki

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,…

CVSS 4,9 · EPSS 0,36 % · rekomendacja wg zapisanej polityki

The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter in all versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…

CVSS 4,9 · EPSS 0,36 % · rekomendacja wg zapisanej polityki

Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs. Attackers controlling sandbox code, such as a prompt-injected coding agent, can plant…

CVSS 4,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server…

CVSS 4,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.

CVSS 4,9 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator with only the read-only view-clients role can access the active primary secret of any confidential client, which should normally be restricted. This…

CVSS 4,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0.

CVSS 4,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki

The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (profile.php) + comment (wp-comments-post.php)' parameter in all versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping. This makes it possible…

CVSS 4,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to…

CVSS 4,9 · EPSS 0,15 % · rekomendacja wg zapisanej polityki

The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could…

CVSS 4,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.

CVSS 4,9 · rekomendacja wg zapisanej polityki

Redash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data source query runner in redash/query_runner/json_ds.py used _get_all_results() to combine its configured base_url with a user-supplied query URL by using urljoin. An absolute query URL replaced the…

CVSS 4,9 · rekomendacja wg zapisanej polityki

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

CVSS 4,8 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch…

CVSS 4,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki