Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was supplied, allowing a connected client to override the server's configured Consul address via a request header. This may allow a malicious client to redirect the server's Consul API traffic to an…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests, and the server-side authorization token, to an attacker-controlled…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify Formula fields can provide an undocumented fourth argument that is treated as a SQL template and interpolated directly into a…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the `image` and `file` fields as raw strings with no output-side HTML-attribute escaping.
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API.
The existing authorization check correctly prevented an organization administrator from editing users in another organization, but it did not prevent them from editing a full administrator within…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated users to skip TOTP two-factor authentication through the Keycloak and Entra ID SSO callbacks. Attackers holding a valid or phished IdP identity linked…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the blacklist. Attackers with revoked administrator grants can continue authenticating and self-link the administrator role to permanently retain privileged access.
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data.
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy.
A successful exploit may…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was supplied, allowing a connected client to override the server's configured Consul address via a request header. This may allow a malicious client to redirect the server's Consul API traffic to an…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests, and the server-side authorization token, to an attacker-controlled…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify Formula fields can provide an undocumented fourth argument that is treated as a SQL template and interpolated directly into a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the `image` and `file` fields as raw strings with no output-side HTML-attribute escaping.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API.
The existing authorization check correctly prevented an organization administrator from editing users in another organization, but it did not prevent them from editing a full administrator within…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated users to skip TOTP two-factor authentication through the Keycloak and Entra ID SSO callbacks. Attackers holding a valid or phished IdP identity linked…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the blacklist. Attackers with revoked administrator grants can continue authenticating and self-link the administrator role to permanently retain privileged access.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy.
A successful exploit may…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,38 % · rekomendacja wg zapisanej polityki