Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json=<file> option, the…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
An access control bypass flaw was identified in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs_ceph_rgw module. When a client requests an existing file…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the proxy target without validating the…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.
Refer to the ' Security Update for ASUS Router Firmware' section…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unauthenticated access, uploads an…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix overflow in passthrough ioctl bounds check
smb2_ioctl_query_info() validates the PASSTHRU_FSCTL response payload
before copying it to userspace.
The payload offset and length both come from 32-bit fields. The…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
CVSS
8,2
EPSS
0,14 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json=<file> option, the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
An access control bypass flaw was identified in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs_ceph_rgw module. When a client requests an existing file…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the proxy target without validating the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.
Refer to the ' Security Update for ASUS Router Firmware' section…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unauthenticated access, uploads an…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix overflow in passthrough ioctl bounds check
smb2_ioctl_query_info() validates the PASSTHRU_FSCTL response payload
before copying it to userspace.
The payload offset and length both come from 32-bit fields. The…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
8,2
0,14 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.