Błąd w OVN umożliwia zdalnemu atakującemu ujawnienie wrażliwych danych z pamięci.
Błąd w OVN umożliwia zdalnemu atakującemu ujawnienie wrażliwych danych z pamięci.
- CVSS
- 8,6
- EPSS
- 0,87 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
KATALOG INFORMACJI
Podatności
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Filtry katalogu · zakres, producent, rekomendacja
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework.
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the regular expression returned by router.matchers.slug() contains adjacent greedy repetitions with overlapping character classes. When an application applies this matcher to an…
- CVSS
- 8,7
- EPSS
- 0,37 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Symfony is a PHP framework for web and console applications and a set of reusable PHP components.
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split() parsed header values with a pattern whose token alternative also matched whitespace, followed by a (?<!\s) lookbehind. A run…
- CVSS
- 8,7
- EPSS
- 0,37 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table…
league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,…
- CVSS
- 8,7
- EPSS
- 0,37 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Brak sanitizacji HTML w lakeFS umożliwia wykonanie złośliwego kodu przez użytkowników z dostępem do repozytoriów.
Brak sanitizacji HTML w lakeFS umożliwia wykonanie złośliwego kodu przez użytkowników z dostępem do repozytoriów.
- CVSS
- 8,7
- EPSS
- 0,37 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin intercepts…
The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin intercepts the apiKeyGenerate/apiKeyRevoke admin tasks before the account-management ACL runs and authorizes the caller on only the admin.login permission (the baseline…
- CVSS
- 8,7
- EPSS
- 0,37 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
CI4MS is a CodeIgniter 4-based content management system skeleton.
CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the `Pages` backend module registers the `html_purify` validation rule on language-keyed page content but persists the raw, un-purified POST value into the database. The public renderer for pages…
- CVSS
- 8,7
- EPSS
- 0,37 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows…
pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to execute commands as root via crafted usernames. Attackers authenticated through RADIUS or LDAP can use usernames containing single quotes…
- CVSS
- 7,7
- EPSS
- 5,37 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that…
Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that allows unauthenticated attackers to crash the service by sending a zero-length handshake frame. Attackers can connect to the handshake port listening on all…
- CVSS
- 8,7
- EPSS
- 0,37 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Frappe is a full-stack web application framework.
Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL executed by the application. This issue is fixed in version…
- CVSS
- 8,7
- EPSS
- 0,37 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows…
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an order_id. Attackers can iterate the order_id parameter, which matches guest orders stored with…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
A relative path traversal vulnerability has been reported to affect Download Station.
A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
A path traversal vulnerability has been reported to affect QcalAgent.
A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Wstrzyknięcie NoSQL w Budibase Server umożliwia modyfikację zapytań MongoDB przez atakujących.
Wstrzyknięcie NoSQL w Budibase Server umożliwia modyfikację zapytań MongoDB przez atakujących.
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to…
FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions.
SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and authenticate with its bearer token to gain administrative control over all users…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows…
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending…
Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed request bodies. Attackers can send small, highly compressed requests with Content-Encoding: gzip to unauthenticated endpoints that expand during…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller…
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows…
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download arbitrary files by computing an md5(filename) token instead of passing a proper authorization check. Attackers can guess or…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to…
jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenant_id and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Plane is an open-source project management tool.
Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html through Issue.objects.create(...) without calling validate_html_content from nh3. Any authenticated user, including a new user with no workspace memberships, can…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Wstrzyknięcie SQL w U-Office Force umożliwia zdalnemu atakującemu manipulację danymi w bazie.
Wstrzyknięcie SQL w U-Office Force umożliwia zdalnemu atakującemu manipulację danymi w bazie.
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Wstrzyknięcie SQL w U-Office Force umożliwia zdalnemu atakującemu manipulację danymi w bazie.
Wstrzyknięcie SQL w U-Office Force umożliwia zdalnemu atakującemu manipulację danymi w bazie.
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory…
MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB…
- CVSS
- 8,7
- EPSS
- 0,36 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Błąd w OVN umożliwia zdalnemu atakującemu ujawnienie wrażliwych danych z pamięci. | Błąd w OVN umożliwia zdalnemu atakującemu ujawnienie wrażliwych danych z pamięci. |
Obserwuj | 8,6 | 0,87 % | ||
| AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. | AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the regular expression returned by router.matchers.slug() contains adjacent greedy repetitions with overlapping character classes. When an application applies this matcher to an… |
Obserwuj | 8,7 | 0,37 % | ||
| Symfony is a PHP framework for web and console applications and a set of reusable PHP components. | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split() parsed header values with a pattern whose token alternative also matched whitespace, followed by a (?<!\s) lookbehind. A run… |
Obserwuj | 8,7 | 0,37 % | ||
| league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table… | league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,… |
Obserwuj | 8,7 | 0,37 % | ||
| Brak sanitizacji HTML w lakeFS umożliwia wykonanie złośliwego kodu przez użytkowników z dostępem do repozytoriów. | Brak sanitizacji HTML w lakeFS umożliwia wykonanie złośliwego kodu przez użytkowników z dostępem do repozytoriów. |
Obserwuj | 8,7 | 0,37 % | ||
| The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin intercepts… | The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin intercepts the apiKeyGenerate/apiKeyRevoke admin tasks before the account-management ACL runs and authorizes the caller on only the admin.login permission (the baseline… |
Obserwuj | 8,7 | 0,37 % | ||
| CI4MS is a CodeIgniter 4-based content management system skeleton. | CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the `Pages` backend module registers the `html_purify` validation rule on language-keyed page content but persists the raw, un-purified POST value into the database. The public renderer for pages… |
Obserwuj | 8,7 | 0,37 % | ||
| pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows… | pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to execute commands as root via crafted usernames. Attackers authenticated through RADIUS or LDAP can use usernames containing single quotes… |
Obserwuj | 7,7 | 5,37 % | ||
| Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that… | Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that allows unauthenticated attackers to crash the service by sending a zero-length handshake frame. Attackers can connect to the handshake port listening on all… |
Obserwuj | 8,7 | 0,37 % | ||
| Frappe is a full-stack web application framework. | Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL executed by the application. This issue is fixed in version… |
Obserwuj | 8,7 | 0,37 % | ||
| NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows… | NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an order_id. Attackers can iterate the order_id parameter, which matches guest orders stored with… |
Obserwuj | 8,7 | 0,36 % | ||
| A relative path traversal vulnerability has been reported to affect Download Station. | A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following… |
Obserwuj | 8,7 | 0,36 % | ||
| A path traversal vulnerability has been reported to affect QcalAgent. | A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and… |
Obserwuj | 8,7 | 0,36 % | ||
| Wstrzyknięcie NoSQL w Budibase Server umożliwia modyfikację zapytań MongoDB przez atakujących. | Wstrzyknięcie NoSQL w Budibase Server umożliwia modyfikację zapytań MongoDB przez atakujących. |
Obserwuj | 8,7 | 0,36 % | ||
| FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to… | FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token… |
Obserwuj | 8,7 | 0,36 % | ||
| SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. | SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and authenticate with its bearer token to gain administrative control over all users… |
Obserwuj | 8,7 | 0,36 % | ||
| Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows… | Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential… |
Obserwuj | 8,7 | 0,36 % | ||
| Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending… | Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed request bodies. Attackers can send small, highly compressed requests with Content-Encoding: gzip to unauthenticated endpoints that expand during… |
Obserwuj | 8,7 | 0,36 % | ||
| Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller… | Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external… |
Obserwuj | 8,7 | 0,36 % | ||
| Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows… | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download arbitrary files by computing an md5(filename) token instead of passing a proper authorization check. Attackers can guess or… |
Obserwuj | 8,7 | 0,36 % | ||
| jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to… | jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenant_id and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or… |
Obserwuj | 8,7 | 0,36 % | ||
| Plane is an open-source project management tool. | Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html through Issue.objects.create(...) without calling validate_html_content from nh3. Any authenticated user, including a new user with no workspace memberships, can… |
Obserwuj | 8,7 | 0,36 % | ||
| Wstrzyknięcie SQL w U-Office Force umożliwia zdalnemu atakującemu manipulację danymi w bazie. | Wstrzyknięcie SQL w U-Office Force umożliwia zdalnemu atakującemu manipulację danymi w bazie. |
Obserwuj | 8,7 | 0,36 % | ||
| Wstrzyknięcie SQL w U-Office Force umożliwia zdalnemu atakującemu manipulację danymi w bazie. | Wstrzyknięcie SQL w U-Office Force umożliwia zdalnemu atakującemu manipulację danymi w bazie. |
Obserwuj | 8,7 | 0,36 % | ||
| MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory… | MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB… |
Obserwuj | 8,7 | 0,36 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.