Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted repository mirror, or a server answering hex_core's API requests, to exhaust the memory of the Erlang VM running hex_core. The same code is vendored in Hex (mix_hex_repo,…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ww_page.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the public…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argument roleKey leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argument filePath causes path traversal. It…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offsets results in buffer overflow. The attack is possible to be…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML via the val parameter in mode=add_todo. Attackers can lure a logged-in administrator into submitting a cross-site POST form without CSRF protection,…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the component Support Config Query. Executing a manipulation of the argument configKey can lead to improper access controls. The…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestricted upload. The attack is possible to be carried out…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/add_student.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtprevious_school causes…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirror to exhaust the memory or disk space of the machine running mix deps.get, mix deps.update, mix hex.package fetch or mix hex.docs fetch.
Hex treats a mirror configured with…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend/parser/api/dataimport/Swagger3ParserApiDefinition.java of the component Swagger3 Parser. Performing a manipulation of the…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection.…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption. The attack may be initiated remotely. The vendor was…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
CVSS
2,1
EPSS
0,29 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted repository mirror, or a server answering hex_core's API requests, to exhaust the memory of the Erlang VM running hex_core. The same code is vendored in Hex (mix_hex_repo,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ww_page.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the public…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argument roleKey leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argument filePath causes path traversal. It…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offsets results in buffer overflow. The attack is possible to be…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML via the val parameter in mode=add_todo. Attackers can lure a logged-in administrator into submitting a cross-site POST form without CSRF protection,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the component Support Config Query. Executing a manipulation of the argument configKey can lead to improper access controls. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestricted upload. The attack is possible to be carried out…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/add_student.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtprevious_school causes…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirror to exhaust the memory or disk space of the machine running mix deps.get, mix deps.update, mix hex.package fetch or mix hex.docs fetch.
Hex treats a mirror configured with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend/parser/api/dataimport/Swagger3ParserApiDefinition.java of the component Swagger3 Parser. Performing a manipulation of the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption. The attack may be initiated remotely. The vendor was…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
2,1
0,29 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjePrzetwarzanie niepełne
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.