KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Mongoose is an embedded web server and network library. Prior to 7.23, ppp_handle_ipv6cp() in src/l2_ppp.c trusts the 16-bit IPv6CP len field without checking it against the received payload size. On a PPP or PPPoE link using MG_ENABLE_TCPIP and MG_ENABLE_IPV6, an unauthenticated adjacent peer can…
SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211_process_rx_twt_action() only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach…
The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the `ajax_iwar_preview_email()` function, which uses `is_admin()` as its only authorization check and allows…
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_ready sk deref in iso_conn_ready must be done either under conn->lock, or holding a refcount, to avoid concurrent close. conn->sk is currently accessed without either: [Task 1]…
Błąd w jądrze Linuxa umożliwia wyciek pamięci przez nieprawidłowe zarządzanie statystykami RX.
In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Użycie połączenia w jądrze Linux prowadzi do wykorzystania po zwolnieniu obiektu.
Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific…
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can…
ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only the individual user's status. Users of a deactivated organization who hold valid credentials, an existing session, or a refresh token can still sign in, create sessions, and…
Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
Błąd w jądrze Linuxa w mt76 prowadzi do uszkodzenia listy poll_list, co może powodować awarie.
Wstrzyknięcie SQL w ASP-CMS umożliwia zdalnym atakującym dostęp do wrażliwych danych.
A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.
Użycie podatnego serwera WSGI w HCL BigFix SM zwiększa ryzyko nieautoryzowanego dostępu.
Błąd wyścigu w jądrze Linuxa w Bluetooth umożliwia usunięcie połączenia w trakcie jego użycia.
Wyścig w V8 w Google Chrome umożliwia zdalnemu atakującemu wykorzystanie uszkodzenia sterty.
The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an administrator, resulting in…
The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection submitted with a profile update, allowing any authenticated user, such as a subscriber, to grant themselves the Administrator role.
Błąd w Shibby Tomato umożliwia zdalne zapisanie danych poza przydzieloną pamięcią.
In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Wykorzystanie podatności CSRF w WorkScout-Core umożliwia obejście uwierzytelnienia.
Błąd use-after-free w komponencie Gtk umożliwia zdalne wykonanie kodu.
Błąd use-after-free w komponencie graficznym umożliwia zdalne wykonanie kodu.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Mongoose is an embedded web server and network library. | Mongoose is an embedded web server and network library. Prior to 7.23, ppp_handle_ipv6cp() in src/l2_ppp.c trusts the 16-bit IPv6CP len field without checking it against the received payload size. On a PPP or PPPoE link using MG_ENABLE_TCPIP and MG_ENABLE_IPV6, an unauthenticated adjacent peer can… |
Obserwuj | 8,8 | 0,24 % | ||
| SQL Injection vulnerability in DIAEnergie. | SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
Obserwuj | 8,8 | 0,24 % | ||
| In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver… | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211_process_rx_twt_action() only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach… |
Obserwuj | 8,8 | 0,24 % | ||
| The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including,… | The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the `ajax_iwar_preview_email()` function, which uses `is_admin()` as its only authorization check and allows… |
Obserwuj | 8,8 | 0,24 % | ||
| In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_ready sk deref in… | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_ready sk deref in iso_conn_ready must be done either under conn->lock, or holding a refcount, to avoid concurrent close. conn->sk is currently accessed without either: [Task 1]… |
Obserwuj | 8,8 | 0,24 % | ||
| Błąd w jądrze Linuxa umożliwia wyciek pamięci przez nieprawidłowe zarządzanie statystykami RX. | Błąd w jądrze Linuxa umożliwia wyciek pamięci przez nieprawidłowe zarządzanie statystykami RX. |
Obserwuj | 8,8 | 0,24 % | ||
| In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. | In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. |
Obserwuj | 8,8 | 0,24 % | ||
| Użycie połączenia w jądrze Linux prowadzi do wykorzystania po zwolnieniu obiektu. | Użycie połączenia w jądrze Linux prowadzi do wykorzystania po zwolnieniu obiektu. |
Obserwuj | 8,8 | 0,24 % | ||
| Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and… | Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific… |
Obserwuj | 8,8 | 0,24 % | ||
| ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor… | ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can… |
Obserwuj | 8,8 | 0,24 % | ||
| ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only the individual… | ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only the individual user's status. Users of a deactivated organization who hold valid credentials, an existing session, or a refresh token can still sign in, create sessions, and… |
Obserwuj | 8,8 | 0,24 % | ||
| Privilege escalation in the Places component. | Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
Obserwuj | 8,8 | 0,24 % | ||
| Błąd w jądrze Linuxa w mt76 prowadzi do uszkodzenia listy poll_list, co może powodować awarie. | Błąd w jądrze Linuxa w mt76 prowadzi do uszkodzenia listy poll_list, co może powodować awarie. |
Obserwuj | 8,8 | 0,24 % | ||
| Wstrzyknięcie SQL w ASP-CMS umożliwia zdalnym atakującym dostęp do wrażliwych danych. | Wstrzyknięcie SQL w ASP-CMS umożliwia zdalnym atakującym dostęp do wrażliwych danych. |
Obserwuj | 8,7 | 0,74 % | ||
| A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. | A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy. |
Obserwuj | 8,8 | 0,23 % | ||
| Użycie podatnego serwera WSGI w HCL BigFix SM zwiększa ryzyko nieautoryzowanego dostępu. | Użycie podatnego serwera WSGI w HCL BigFix SM zwiększa ryzyko nieautoryzowanego dostępu. |
Obserwuj | 8,8 | 0,23 % | ||
| Błąd wyścigu w jądrze Linuxa w Bluetooth umożliwia usunięcie połączenia w trakcie jego użycia. | Błąd wyścigu w jądrze Linuxa w Bluetooth umożliwia usunięcie połączenia w trakcie jego użycia. |
Obserwuj | 8,8 | 0,23 % | ||
| Wyścig w V8 w Google Chrome umożliwia zdalnemu atakującemu wykorzystanie uszkodzenia sterty. | Wyścig w V8 w Google Chrome umożliwia zdalnemu atakującemu wykorzystanie uszkodzenia sterty. |
Obserwuj | 8,8 | 0,23 % | ||
| The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names,… | The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an administrator, resulting in… |
Obserwuj | 8,8 | 0,23 % | ||
| The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection… | The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection submitted with a profile update, allowing any authenticated user, such as a subscriber, to grant themselves the Administrator role. |
Obserwuj | 8,8 | 0,23 % | ||
| Błąd w Shibby Tomato umożliwia zdalne zapisanie danych poza przydzieloną pamięcią. | Błąd w Shibby Tomato umożliwia zdalne zapisanie danych poza przydzieloną pamięcią. |
Obserwuj | 8,7 | 0,73 % | ||
| In multiple locations, there is a possible out-of-bounds write due to uninitialized data. | In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
Obserwuj | 8,8 | 0,23 % | ||
| Wykorzystanie podatności CSRF w WorkScout-Core umożliwia obejście uwierzytelnienia. | Wykorzystanie podatności CSRF w WorkScout-Core umożliwia obejście uwierzytelnienia. |
Obserwuj | 8,8 | 0,23 % | ||
| Błąd use-after-free w komponencie Gtk umożliwia zdalne wykonanie kodu. | Błąd use-after-free w komponencie Gtk umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,23 % | ||
| Błąd use-after-free w komponencie graficznym umożliwia zdalne wykonanie kodu. | Błąd use-after-free w komponencie graficznym umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,23 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.