Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field.…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 1,12 % · rekomendacja wg zapisanej polityki
Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
Deserialization of Untrusted Data vulnerability in designthemes Solar Energy solar allows Object Injection.This issue affects Solar Energy: from n/a through <= 3.5.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 1,61 % · rekomendacja wg zapisanej polityki
Apache Karaf exposes a JMX MBeanServer guarded by KarafMBeanServerGuard, which enforces role-based access control (RBAC) on MBean operations invoked over the remote JMX connector (RMI registry/server, enabled by default on ports 1099 and 44444). The guard is implemented as a…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
md/raid5: avoid R5_Overlap races while breaking stripe batches
KCSAN report a race in break_stripe_batch_list() vs. raid5_make_request()
on sh->dev[i].flags (plain word write vs. atomic bit op)..
and .. one possible scenario…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
dm-integrity: fix a bug if the bio is out of limits
If dm_integrity_check_limits fails, the code would exit with
DM_MAPIO_KILL. However, the range would be already locked at this point,
and it wouldn't be unlocked, resulting in…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 1,12 % · rekomendacja wg zapisanej polityki
Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
Deserialization of Untrusted Data vulnerability in designthemes Solar Energy solar allows Object Injection.This issue affects Solar Energy: from n/a through <= 3.5.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,61 % · rekomendacja wg zapisanej polityki
LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 1,61 % · rekomendacja wg zapisanej polityki
Apache Karaf exposes a JMX MBeanServer guarded by KarafMBeanServerGuard, which enforces role-based access control (RBAC) on MBean operations invoked over the remote JMX connector (RMI registry/server, enabled by default on ports 1099 and 44444). The guard is implemented as a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
md/raid5: avoid R5_Overlap races while breaking stripe batches
KCSAN report a race in break_stripe_batch_list() vs. raid5_make_request()
on sh->dev[i].flags (plain word write vs. atomic bit op)..
and .. one possible scenario…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
dm-integrity: fix a bug if the bio is out of limits
If dm_integrity_check_limits fails, the code would exit with
DM_MAPIO_KILL. However, the range would be already locked at this point,
and it wouldn't be unlocked, resulting in…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki