Luka w WebCenter Content: Imaging pozwala na nieautoryzowany dostęp do danych.
Luka w WebCenter Content: Imaging pozwala na nieautoryzowany dostęp do danych.
- CVSS
- 8,7
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
KATALOG INFORMACJI
Podatności
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Filtry katalogu · zakres, producent, rekomendacja
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
- CVSS
- 8,7
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Luka w PeopleSoft Enterprise PeopleTools pozwala na nieautoryzowany dostęp do krytycznych danych.
Luka w PeopleSoft Enterprise PeopleTools pozwala na nieautoryzowany dostęp do krytycznych danych.
- CVSS
- 8,7
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX…
A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or cause denial of service via a specific CFM Message sent to…
- CVSS
- 8,7
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI).
Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Life Sciences. Successful attacks…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting (XSS) that could allow an authenticated user to store…
Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting (XSS) that could allow an authenticated user to store crafted content that executes arbitrary JavaScript in another user's authenticated session when they preview shared content. This could potentially lead to session…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments).
Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Document…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework).
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated…
OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/workspaces. Attackers can read the unmasked browserfabric_api_key in each workspace's settings map, along with workspace…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Nieautoryzowany dostęp do sesji Redis w klastrze CVX umożliwia uzyskanie pełnych uprawnień root.
Nieautoryzowany dostęp do sesji Redis w klastrze CVX umożliwia uzyskanie pełnych uprawnień root.
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond…
When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data of unlimited size. Zone files which are written out by NSD itself, such as for zones for which…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite…
A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes.
When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts…
ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other authenticator enrollment on identify-only login sessions, before any primary factor is verified. Unauthenticated attackers knowing only a victim's…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Typebot is an open-source chatbot builder.
Typebot is an open-source chatbot builder. In self-hosted versions prior to 3.18.0, the server-side Send Email integration block allows arbitrary reading of local files on the server. The block builds Nodemailer attachments from a typebot variable, and its parseAttachments helper returns the…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns.
The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client's cookie bytes over the value the server issued, and the server then decides whether the client has been verified from…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Wtyczka zakładek w AVideo pozwala na wstrzyknięcie skryptów XSS przez nazwy rozdziałów.
Wtyczka zakładek w AVideo pozwala na wstrzyknięcie skryptów XSS przez nazwy rozdziałów.
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability.
CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.
- CVSS
- 8,6
- EPSS
- 0,82 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
W HashiCorp Nomad występuje luka umożliwiająca dostęp do plików hosta z kontenera.
W HashiCorp Nomad występuje luka umożliwiająca dostęp do plików hosta z kontenera.
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Wykorzystanie luki w przejściu ścieżki w UniFi Network Application pozwala na eskalację uprawnień do zapisu.
Wykorzystanie luki w przejściu ścieżki w UniFi Network Application pozwala na eskalację uprawnień do zapisu.
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle…
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In…
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In…
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows…
- CVSS
- 8,7
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Luka w WebCenter Content: Imaging pozwala na nieautoryzowany dostęp do danych. | Luka w WebCenter Content: Imaging pozwala na nieautoryzowany dostęp do danych. |
Obserwuj | 8,7 | 0,33 % | ||
| Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle… |
Obserwuj | 8,7 | 0,33 % | ||
| Luka w PeopleSoft Enterprise PeopleTools pozwala na nieautoryzowany dostęp do krytycznych danych. | Luka w PeopleSoft Enterprise PeopleTools pozwala na nieautoryzowany dostęp do krytycznych danych. |
Obserwuj | 8,7 | 0,33 % | ||
| A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX… | A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or cause denial of service via a specific CFM Message sent to… |
Obserwuj | 8,7 | 0,33 % | ||
| Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). | Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Life Sciences. Successful attacks… |
Obserwuj | 8,7 | 0,32 % | ||
| Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting (XSS) that could allow an authenticated user to store… | Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting (XSS) that could allow an authenticated user to store crafted content that executes arbitrary JavaScript in another user's authenticated session when they preview shared content. This could potentially lead to session… |
Obserwuj | 8,7 | 0,32 % | ||
| Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle… |
Obserwuj | 8,7 | 0,32 % | ||
| Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). | Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Document… |
Obserwuj | 8,7 | 0,32 % | ||
| Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise… |
Obserwuj | 8,7 | 0,32 % | ||
| OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated… | OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/workspaces. Attackers can read the unmasked browserfabric_api_key in each workspace's settings map, along with workspace… |
Obserwuj | 8,7 | 0,32 % | ||
| Nieautoryzowany dostęp do sesji Redis w klastrze CVX umożliwia uzyskanie pełnych uprawnień root. | Nieautoryzowany dostęp do sesji Redis w klastrze CVX umożliwia uzyskanie pełnych uprawnień root. |
Obserwuj | 8,7 | 0,32 % | ||
| When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond… | When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data of unlimited size. Zone files which are written out by NSD itself, such as for zones for which… |
Obserwuj | 8,7 | 0,32 % | ||
| A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite… | A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is… |
Obserwuj | 8,7 | 0,32 % | ||
| When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. | When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD… |
Obserwuj | 8,7 | 0,32 % | ||
| ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts… | ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other authenticator enrollment on identify-only login sessions, before any primary factor is verified. Unauthenticated attackers knowing only a victim's… |
Obserwuj | 8,7 | 0,32 % | ||
| Typebot is an open-source chatbot builder. | Typebot is an open-source chatbot builder. In self-hosted versions prior to 3.18.0, the server-side Send Email integration block allows arbitrary reading of local files on the server. The block builds Nodemailer attachments from a typebot variable, and its parseAttachments helper returns the… |
Obserwuj | 8,7 | 0,32 % | ||
| The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. | The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client's cookie bytes over the value the server issued, and the server then decides whether the client has been verified from… |
Obserwuj | 8,7 | 0,32 % | ||
| Wtyczka zakładek w AVideo pozwala na wstrzyknięcie skryptów XSS przez nazwy rozdziałów. | Wtyczka zakładek w AVideo pozwala na wstrzyknięcie skryptów XSS przez nazwy rozdziałów. |
Obserwuj | 8,7 | 0,32 % | ||
| CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. | CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server. |
Obserwuj | 8,6 | 0,82 % | ||
| W HashiCorp Nomad występuje luka umożliwiająca dostęp do plików hosta z kontenera. | W HashiCorp Nomad występuje luka umożliwiająca dostęp do plików hosta z kontenera. |
Obserwuj | 8,7 | 0,32 % | ||
| Wykorzystanie luki w przejściu ścieżki w UniFi Network Application pozwala na eskalację uprawnień do zapisu. | Wykorzystanie luki w przejściu ścieżki w UniFi Network Application pozwala na eskalację uprawnień do zapisu. |
Obserwuj | 8,7 | 0,32 % | ||
| Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle… | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with… |
Obserwuj | 8,7 | 0,32 % | ||
| Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In… | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows… |
Obserwuj | 8,7 | 0,32 % | ||
| Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise… |
Obserwuj | 8,7 | 0,32 % | ||
| Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In… | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows… |
Obserwuj | 8,7 | 0,32 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.