Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** `iss` claim against an issuer allowlist using Python's `urlparse` before performing OIDC discovery with `requests`. Because `urlparse` and `requests`/`urllib3` parse an authority string containing a backslash…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci: validate codec capability element length
Read Local Codec Capabilities returns a sequence of capability elements.
Each element starts with a one-byte length followed by that many…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: iosm: bound device offsets in the MUX downlink decoder
mux_dl_adb_decode() walks a chain of aggregated datagram tables using
offsets and lengths taken from the modem. first_table_index,
next_table_index, table_length,…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp
l2cap_le_connect_rsp() obtains a channel via
__l2cap_get_chan_by_ident() but neither holds a reference nor uses
l2cap_chan_hold_unless_zero() before locking and operating on…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: bla: reacquire gw address after skb realloc
The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate
the buffer behind the skb. Variables which were pointing to the old buffer
need to be reassigned…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: retrieve ethhdr after potential skb realloc on RX
pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind
the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** `iss` claim against an issuer allowlist using Python's `urlparse` before performing OIDC discovery with `requests`. Because `urlparse` and `requests`/`urllib3` parse an authority string containing a backslash…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci: validate codec capability element length
Read Local Codec Capabilities returns a sequence of capability elements.
Each element starts with a one-byte length followed by that many…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: iosm: bound device offsets in the MUX downlink decoder
mux_dl_adb_decode() walks a chain of aggregated datagram tables using
offsets and lengths taken from the modem. first_table_index,
next_table_index, table_length,…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp
l2cap_le_connect_rsp() obtains a channel via
__l2cap_get_chan_by_ident() but neither holds a reference nor uses
l2cap_chan_hold_unless_zero() before locking and operating on…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: bla: reacquire gw address after skb realloc
The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate
the buffer behind the skb. Variables which were pointing to the old buffer
need to be reassigned…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: retrieve ethhdr after potential skb realloc on RX
pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind
the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki