Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI.
An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.17.4 via the get_user_profile_structure. This makes it possible for…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: reject undersized DACLs before parsing ACEs
parse_dacl() limits the attacker-controlled ACE count by comparing it
with the number of minimal ACEs that fit in the DACL size. The DACL size
field is 16 bits, but the…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in __close_file_table_ids()
A ksmbd_file can remain alive after logical close while another session
holds a temporary reference obtained through ksmbd_lookup_fd_inode().
ksmbd_close_fd() currently marks…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI.
An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.17.4 via the get_user_profile_structure. This makes it possible for…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: reject undersized DACLs before parsing ACEs
parse_dacl() limits the attacker-controlled ACE count by comparing it
with the number of minimal ACEs that fit in the DACL size. The DACL size
field is 16 bits, but the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in __close_file_table_ids()
A ksmbd_file can remain alive after logical close while another session
holds a temporary reference obtained through ksmbd_lookup_fd_inode().
ksmbd_close_fd() currently marks…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki