Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthenticated routes, allowing attackers to mark arbitrary orders as paid or failed, to cancel them, and to obtain order keys which expose guest buyers' details.
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio_ccw: Move cp cleanup out of not operational
The fsm_notoper() routine is called when the device has been
lost, and is (by definition) no longer operational. Since this
can happen asynchronously from the normal behavior…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix RB-tree corruption in probe error path
The info->node RB-tree member is zero-initialized via kzalloc. If
a device does not support ATS, the device_rbtree_insert() call is
skipped. If a subsequent probe step…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint.
To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6.
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthenticated routes, allowing attackers to mark arbitrary orders as paid or failed, to cancel them, and to obtain order keys which expose guest buyers' details.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio_ccw: Move cp cleanup out of not operational
The fsm_notoper() routine is called when the device has been
lost, and is (by definition) no longer operational. Since this
can happen asynchronously from the normal behavior…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix RB-tree corruption in probe error path
The info->node RB-tree member is zero-initialized via kzalloc. If
a device does not support ATS, the device_rbtree_insert() call is
skipped. If a subsequent probe step…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint.
To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,17 % · rekomendacja wg zapisanej polityki