Podatności

Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

CVSS 4,2 · EPSS 0,14 % · rekomendacja wg zapisanej polityki

GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to approve a merge request despite having contributed commits to it, due to improper…

CVSS 4,2 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into attacker-controlled accounts because the OpenID Connect callback never validates the OAuth state parameter. Attackers can induce a victim's browser to load…

CVSS 4,2 · EPSS 0,11 % · rekomendacja wg zapisanej polityki

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user…

CVSS 4,2 · rekomendacja wg zapisanej polityki

The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c computed the packet length of a received frame as pkt_len = rx_frame->length - IEEE802154_FCS_LENGTH without first checking that the radio-reported length could hold an FCS. pkt_len is a uint8_t, so a reported length of…

CVSS 4,2 · rekomendacja wg zapisanej polityki

The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks.

CVSS 4,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki

The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access and above to make the site issue requests to internal services that are not otherwise reachable, and to tell which of those are live from the response.

CVSS 4,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki

The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases, allowing users with Contributor-level access and above to perform Server-Side…

CVSS 4,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives…

CVSS 4,1 · EPSS 0,14 % · rekomendacja wg zapisanej polityki

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by crypto_write_pem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard…

CVSS 4,1 · EPSS 0,09 % · rekomendacja wg zapisanej polityki

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.ParseCookies in internal/cookies/cookies.go handles boundary ASCII control characters and control-only or empty cookie names differently from several backend cookie parsers. An…

CVSS 4,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go handles a url.ParseRequestURI failure by retaining the raw URI but leaving QUERY_STRING, ARGS_GET, ARGS_GET_NAMES, and the GET-derived…

CVSS 4,0 · EPSS 0,25 % · rekomendacja wg zapisanej polityki

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.

CVSS 4,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Internet…

CVSS 4,0 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService to consume attacker-controlled metadata and content.…

CVSS 4,0 · EPSS 0,07 % · rekomendacja wg zapisanej polityki

FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is written by http_proxy_connect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a…

CVSS 4,0 · rekomendacja wg zapisanej polityki

ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /downloadfile/:docid endpoint that allows remote attackers to bypass the private-IP request-filtering-agent by exploiting the isInJwtToken flag when JWT verification is disabled in…

CVSS 4,0 · rekomendacja wg zapisanej polityki

A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.

CVSS 3,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

CVSS 3,8 · EPSS 0,21 % · rekomendacja wg zapisanej polityki

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and…

CVSS 3,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback compare blocked_domains entries with a URL hostname before both values are normalized to the form used…

CVSS 3,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused,…

CVSS 3,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and…

CVSS 3,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphql_ws/handlers.py does not remove naturally completed operations from self.tasks and self.subscriptions. When…

CVSS 3,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki

Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter without escaping wildcard characters. Unauthenticated attackers can submit incremental wildcard patterns such…

CVSS 3,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki