Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_locations_backup_file_callback' function in all versions up to, and including, 4.9. This makes it possible for authenticated attackers, with subscriber-level…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).
The client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request with the `Proxy-Authentication` header, which arrives to…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsentPage, an attacker can craft an OAuth2 authorization request containing a malicious value that is stored server-side and later rendered unencoded in the…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_locations_backup_file_callback' function in all versions up to, and including, 4.9. This makes it possible for authenticated attackers, with subscriber-level…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).
The client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request with the `Proxy-Authentication` header, which arrives to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsentPage, an attacker can craft an OAuth2 authorization request containing a malicious value that is stored server-side and later rendered unencoded in the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,32 % · rekomendacja wg zapisanej polityki