Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Fix unmatched rn_unregister on failed accept
When svc_rdma_accept() takes the errout path before
rpcrdma_rn_register() has succeeded, the existing cleanup block
calls rpcrdma_rn_unregister(dev, &newxprt->sc_rn)…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise stores failed TOTP verification attempts in $_SESSION. An attacker who already possesses a target account's valid primary credential can restart the login workflow in a…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, the REST API did not properly enforce the scope of project- and workspace-scoped teams, allowing a user to submit invalid team configurations through the API. By assigning…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.2.0 until 3.2.5, 3.3.4, 3.4.7, and 3.5.4, applications that enable permitSetMultiParamEntries can pass objects whose keys are expanded into a SQL SET clause without being processed…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse proxy.
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Bound SW TPA IDs to prevent crashes
FW supports up to 1024 concurrent TPAs, so the FW TPA ID is in the range
0..1023 (see commit ec4d8e7cf024 ("bnxt_en: Add TPA ID mapping logic for
57500 chips.")). bnxt_alloc_agg_idx…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
When a secondary channel is no longer supported by the server,
cifs_chan_skip_or_disable() drops the channel reference with
cifs_put_tcp_session() and then continues…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Fix unmatched rn_unregister on failed accept
When svc_rdma_accept() takes the errout path before
rpcrdma_rn_register() has succeeded, the existing cleanup block
calls rpcrdma_rn_unregister(dev, &newxprt->sc_rn)…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise stores failed TOTP verification attempts in $_SESSION. An attacker who already possesses a target account's valid primary credential can restart the login workflow in a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, the REST API did not properly enforce the scope of project- and workspace-scoped teams, allowing a user to submit invalid team configurations through the API. By assigning…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.2.0 until 3.2.5, 3.3.4, 3.4.7, and 3.5.4, applications that enable permitSetMultiParamEntries can pass objects whose keys are expanded into a SQL SET clause without being processed…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse proxy.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Bound SW TPA IDs to prevent crashes
FW supports up to 1024 concurrent TPAs, so the FW TPA ID is in the range
0..1023 (see commit ec4d8e7cf024 ("bnxt_en: Add TPA ID mapping logic for
57500 chips.")). bnxt_alloc_agg_idx…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
When a secondary channel is no longer supported by the server,
cifs_chan_skip_or_disable() drops the channel reference with
cifs_put_tcp_session() and then continues…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,44 % · rekomendacja wg zapisanej polityki