Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can read…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
TP-Link Tapo
C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ
SOAP handlers. An authenticated ONVIF client can submit an excessive number of
preset-related elements, causing writes beyond the bounds of fixed-size stack
arrays and resulting in a crash of the affected…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL to the query.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery,…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the content is viewed.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities.
Previous versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset.
To remediate this issue, users should upgrade to version 2.267.0 or…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datum_size smaller than the 36-byte AES-CCM header,…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing IT_ConvertTrack() to read…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vie_emulate_movs() and vie_emulate_stos() in usr/src/uts/intel/io/vmm/vmm_instruction_emul.c do not clear the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem() while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ() narrows file-controlled unsigned string offsets from /#WINDOWS and /#IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /#STRINGS…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A heap-based buffer over-read in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service (application crash) with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies d_nelmts *…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, switcher() in usr/src/cmd/nscd/nscd_frontend.c, does not close file descriptors that are passed with a door call but not used by the request,…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
CVSS
6,8
EPSS
0,12 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can read…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
TP-Link Tapo
C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ
SOAP handlers. An authenticated ONVIF client can submit an excessive number of
preset-related elements, causing writes beyond the bounds of fixed-size stack
arrays and resulting in a crash of the affected…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL to the query.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the content is viewed.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities.
Previous versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset.
To remediate this issue, users should upgrade to version 2.267.0 or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datum_size smaller than the 36-byte AES-CCM header,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing IT_ConvertTrack() to read…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vie_emulate_movs() and vie_emulate_stos() in usr/src/uts/intel/io/vmm/vmm_instruction_emul.c do not clear the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem() while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ() narrows file-controlled unsigned string offsets from /#WINDOWS and /#IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /#STRINGS…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A heap-based buffer over-read in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service (application crash) with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies d_nelmts *…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, switcher() in usr/src/cmd/nscd/nscd_frontend.c, does not close file descriptors that are passed with a door call but not used by the request,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
6,8
0,12 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.