Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request parameter…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Web Vitals Tracking WordPress plugin through 5.4.2 does not validate or escape performance measurements submitted by unauthenticated visitors before storing them and outputting them in a script context on an administrative page, allowing unauthenticated attackers to perform Stored Cross-Site…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
When performing channel switches on different radios within a short
timeframe, channel contexts with different bands can be carried…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks
There is theoretical UAF if the conn is freed while the hci_sync task
is running.
Hold refcount to avoid that.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The HL7800 cellular modem driver's +CGCONTRDP: response handler on_cmd_atcmdinfo_ipaddr() in drivers/modem/vendor_standalone/hl7800.c parses the PDP-context dynamic parameters (local address, subnet mask, gateway, and DNS servers) that the cellular network assigns to the device. The response is…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup()
ath12k_mac_dp_peer_cleanup() clears the ML peer ID slot on the
free_ml_peer_id_map bitmap by indexing it with dp_peer->peer_id. That is
wrong:…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback
There is theoretical UAF if the conn is freed while the hci_sync task is
running.
Hold refcount to avoid that. Handle NULL hcon, return 0 + do nothing to
match…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero
hci_conn::iso_data is accessed and modified without lock or RCU.
This leads to a race
[Task hdev->workqueue] [Task 2]
iso_recv…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
CVSS
8,8
EPSS
0,34 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the attacker-controlled sort request parameter…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The Web Vitals Tracking WordPress plugin through 5.4.2 does not validate or escape performance measurements submitted by unauthenticated visitors before storing them and outputting them in a script context on an administrative page, allowing unauthenticated attackers to perform Stored Cross-Site…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
When performing channel switches on different radios within a short
timeframe, channel contexts with different bands can be carried…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks
There is theoretical UAF if the conn is freed while the hci_sync task
is running.
Hold refcount to avoid that.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The HL7800 cellular modem driver's +CGCONTRDP: response handler on_cmd_atcmdinfo_ipaddr() in drivers/modem/vendor_standalone/hl7800.c parses the PDP-context dynamic parameters (local address, subnet mask, gateway, and DNS servers) that the cellular network assigns to the device. The response is…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup()
ath12k_mac_dp_peer_cleanup() clears the ML peer ID slot on the
free_ml_peer_id_map bitmap by indexing it with dp_peer->peer_id. That is
wrong:…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback
There is theoretical UAF if the conn is freed while the hci_sync task is
running.
Hold refcount to avoid that. Handle NULL hcon, return 0 + do nothing to
match…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero
hci_conn::iso_data is accessed and modified without lock or RCU.
This leads to a race
[Task hdev->workqueue] [Task 2]
iso_recv…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
8,8
0,34 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.