Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integrity check performed at all. RFC 9580 sec. 13.7 permits an implementation to release the cleartext of the fully authenticated chunks when…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Pie Forms for WP plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6 via the format_classic function. This is due to insufficient file type validation where the validate_classic method validates file extensions and sets error messages but does…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies are decrypted using a fixed, publicly documented AES-128-ECB key with no integrity credential. Attackers who can intercept…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json=<file> option, the…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capability or nonce checks on the handler that deploys a staging site to the live site, allowing any authenticated user with a Subscriber account on a WP Time Capsule staging site to overwrite the separate…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.
Refer to the ' Security Update for ASUS Router Firmware' section…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unauthenticated access, uploads an…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integrity check performed at all. RFC 9580 sec. 13.7 permits an implementation to release the cleartext of the fully authenticated chunks when…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Pie Forms for WP plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6 via the format_classic function. This is due to insufficient file type validation where the validate_classic method validates file extensions and sets error messages but does…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies are decrypted using a fixed, publicly documented AES-128-ECB key with no integrity credential. Attackers who can intercept…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json=<file> option, the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capability or nonce checks on the handler that deploys a staging site to the live site, allowing any authenticated user with a Subscriber account on a WP Time Capsule staging site to overwrite the separate…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.
Refer to the ' Security Update for ASUS Router Firmware' section…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unauthenticated access, uploads an…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,65 % · rekomendacja wg zapisanej polityki