Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existing_image field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete(). Attackers can delete the database.php configuration file to…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue() function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structured data values, and…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. While the vulnerability is…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existing_image field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete(). Attackers can delete the database.php configuration file to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue() function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structured data values, and…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. While the vulnerability is…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,46 % · rekomendacja wg zapisanej polityki