Baza CVE

Niewłaściwa ochrona przed zakłóceniami w Microchip SAMA5D4 umożliwia wstrzyknięcie błędów sprzętowych.

Wykonanie zdalnego kodu w Craft CMS przez obejście czyszczenia JSON w panelu sterowania.

Wykorzystanie podatności w AWX pozwala na zapis plików w dowolnej lokalizacji systemu.

Podatność SSRF w AWX umożliwia atakującym dostęp do wewnętrznych usług i wyciek danych uwierzytelniających.

Podatność w HP Easy Start dla macOS umożliwia eskalację uprawnień.

Wykryte podatności w HP Easy Start dla macOS mogą prowadzić do eskalacji uprawnień.

The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In virtio_isr() (drivers/virtio/virtio_common.c), the device-written vq->used->ring[idx].id is used directly as an index into vq->recv_cbs[] and vq->desc[], which are both…

Wykorzystanie podatnych komponentów w HCL Hive umożliwia nieautoryzowany dostęp do systemu.

Nieprawidłowe domyślne uprawnienia w HCL Hive umożliwiają nieautoryzowany ruch boczny i przechwytywanie komunikacji.

Wzrost uprawnień w HP Easy Start dla macOS może prowadzić do nieautoryzowanego dostępu.

RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view. Cryptocurrency addresses and blockchain names originating from external sources, including the public crowd-sourced ransomwhe.re feed, were stored without sufficient validation and later…

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session…

Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which is inherited by subprocesses launched…

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem…

TIM Flow before 26.0.6 contains a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and response body content by embedding unsanitized carriage return and line feed sequences in the rt URL parameter, which is reflected into Set-Cookie response headers.…

TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dashboard Excel export endpoint intended for administrative use only. Attackers can craft and submit unauthorized SQL queries to the export…

RansomLook exposed sensitive operator-side scraping configuration through multiple unauthenticated API responses. Location records associated with ransomware groups and markets were returned largely verbatim to unauthenticated callers whenever the location itself was not marked as private. These…

Błąd w WebKitGTK umożliwia przetwarzanie złośliwych treści i prowadzi do uszkodzenia pamięci.

RansomLook fails to enforce the privacy status of ransomware groups and markets when distributing newly collected victim posts to external notification channels. The post-processing logic checks whether an individual post is marked private but does not verify whether the group or market to which…

RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts. The GroupPost.get API handler concatenates the database-controlled screen value directly with the application's source/ directory and opens the resulting path without verifying that…

RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint for PDF rendering. Prior to the fix, WeasyPrint used its default URL fetcher, allowing resource references contained in…

Wykonanie kodu w RPM przy przetwarzaniu złośliwego archiwum tar umożliwia atakującemu eskalację uprawnień.

RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provides an administrative function for creating new crypto group entries, it was not protected by the application's authentication mechanism. An unauthenticated remote attacker…

Wykonanie kodu w Flair przez załadowanie złośliwego modelu zagraża bezpieczeństwu.

Przepełnienie bufora w zlib umożliwia zdalne wykonanie kodu przez nieprawidłowe wskaźniki.