Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_samples field of FLAC files before using it to size an allocation (np.random.randint(size=(total_samples, channels))). A ~50-byte crafted FLAC file declaring ~100 million samples causes a…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML() construction, TreeBuilder.finish() unconditionally calls _populate_selectedcontent(), which recursively traverses the DOM tree via _find_elements()/_find_element()…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious URL to the SharePoint storage configuration handler. Attackers can send a crafted request to the unauthenticated…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRANDFIELD, ZRANDMEMBER or SRANDMEMBER. Attackers can send a single command against a one-element key with a huge negative COUNT to…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates to…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsnd_server_select_format() DVI_ADPCM block-alignment arithmetic bypasses validation. A malicious RDP client can send two SNDC_FORMATS PDUs with an nBlockAlign too small…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Description
NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as auth_basic "<realm>";. A namespaced authenticated attacker that…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated user. retrieveAttachmentFromIdParam in apps/app/src/server/routes/attachment/get.ts guards the check with a condition requiring the user to be non-null, so a request that carries no…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote, authenticated attacker with administrative privileges could upload executable files and achieve remote code execution. Fixed in 153ec1c.
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,98 % · rekomendacja wg zapisanej polityki
CVSS
8,6
EPSS
0,98 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_samples field of FLAC files before using it to size an allocation (np.random.randint(size=(total_samples, channels))). A ~50-byte crafted FLAC file declaring ~100 million samples causes a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML() construction, TreeBuilder.finish() unconditionally calls _populate_selectedcontent(), which recursively traverses the DOM tree via _find_elements()/_find_element()…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious URL to the SharePoint storage configuration handler. Attackers can send a crafted request to the unauthenticated…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRANDFIELD, ZRANDMEMBER or SRANDMEMBER. Attackers can send a single command against a one-element key with a huge negative COUNT to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsnd_server_select_format() DVI_ADPCM block-alignment arithmetic bypasses validation. A malicious RDP client can send two SNDC_FORMATS PDUs with an nBlockAlign too small…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Description
NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as auth_basic "<realm>";. A namespaced authenticated attacker that…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated user. retrieveAttachmentFromIdParam in apps/app/src/server/routes/attachment/get.ts guards the check with a condition requiring the user to be non-null, so a request that carries no…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote, authenticated attacker with administrative privileges could upload executable files and achieve remote code execution. Fixed in 153ec1c.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,98 % · rekomendacja wg zapisanej polityki
8,6
0,98 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.