Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme. Authenticated users can embed javascript: links in shared chats that, when clicked by a victim, steal…
Opis źródłowy NVD · ENCVSS 6,4 · rekomendacja wg zapisanej polityki
A flaw was found in Red Hat Quay. The build trigger management application programming interface (API) fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build…
Opis źródłowy NVD · ENCVSS 6,4 · rekomendacja wg zapisanej polityki
LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting. Authenticated users can upload XML documents whose stylesheet href points to internal http,…
Opis źródłowy NVD · ENCVSS 6,4 · rekomendacja wg zapisanej polityki
amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotiated-unlimited states. A malicious or…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-only containment logic in its site UploaderHelper . The showImage action resolves a request-controlled path, calls that helper, and then returns the image. If image decoding is…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go of the component SQL Validator. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite_string() in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestricted upload. The attack is possible to be carried out…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection.…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows authenticated console users to bypass profile grants by supplying arbitrary class and key parameters. Attackers can invoke the linkset delete, detach and get-remote-object routes to…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFormDemoController.java of the component Autocomplete Data Handler. Performing a manipulation of the argument searchVal results in sql…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and the configured secret to brute-force low-entropy plaintexts much faster than configured.
The dump/1 callback that…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme. Authenticated users can embed javascript: links in shared chats that, when clicked by a victim, steal…
A flaw was found in Red Hat Quay. The build trigger management application programming interface (API) fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build…
LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting. Authenticated users can upload XML documents whose stylesheet href points to internal http,…
amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotiated-unlimited states. A malicious or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to execution with unnecessary privileges. The attack can…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-only containment logic in its site UploaderHelper . The showImage action resolves a request-controlled path, calls that helper, and then returns the image. If image decoding is…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go of the component SQL Validator. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite_string() in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestricted upload. The attack is possible to be carried out…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manipulation of the argument code results in code injection. The attack can be launched remotely. The exploit has been made…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows authenticated console users to bypass profile grants by supplying arbitrary class and key parameters. Attackers can invoke the linkset delete, detach and get-remote-object routes to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFormDemoController.java of the component Autocomplete Data Handler. Performing a manipulation of the argument searchVal results in sql…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and the configured secret to brute-force low-entropy plaintexts much faster than configured.
The dump/1 callback that…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki