Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convert_palette_images_to_truecolor() function. This is due to insufficient file type validation before processing uploaded files.…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possible for Roo to automatically execute commands that did not match the allow list prefixes. This issue has been patched in version 3.26.7.
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integrity check performed at all. RFC 9580 sec. 13.7 permits an implementation to release the cleartext of the fully authenticated chunks when…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Pie Forms for WP plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6 via the format_classic function. This is due to insufficient file type validation where the validate_classic method validates file extensions and sets error messages but does…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies are decrypted using a fixed, publicly documented AES-128-ECB key with no integrity credential. Attackers who can intercept…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privileged…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convert_palette_images_to_truecolor() function. This is due to insufficient file type validation before processing uploaded files.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possible for Roo to automatically execute commands that did not match the allow list prefixes. This issue has been patched in version 3.26.7.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integrity check performed at all. RFC 9580 sec. 13.7 permits an implementation to release the cleartext of the fully authenticated chunks when…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Pie Forms for WP plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6 via the format_classic function. This is due to insufficient file type validation where the validate_classic method validates file extensions and sets error messages but does…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies are decrypted using a fixed, publicly documented AES-128-ECB key with no integrity credential. Attackers who can intercept…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privileged…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,16 % · rekomendacja wg zapisanej polityki