Podatności

Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a…

CVSS 8,6 · EPSS 8,45 % · rekomendacja wg zapisanej polityki

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like…

CVSS 8,6 · EPSS 7,05 % · rekomendacja wg zapisanej polityki

The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the `value` parameter of the `update-photo` AJAX action. This is due to insufficient shell escaping within the `wppa_image_magick_a()` function, where…

CVSS 8,8 · EPSS 1,47 % · rekomendacja wg zapisanej polityki

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki

Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands by storing an unvalidated parent interface name. Attackers can save a crafted 'if' value, then edit the QinQ entry so it is interpolated…

CVSS 7,2 · EPSS 8,63 % · rekomendacja wg zapisanej polityki

The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile function, as sanitize_file_name() does…

CVSS 8,8 · EPSS 0,58 % · rekomendacja wg zapisanej polityki

The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension…

CVSS 8,8 · EPSS 0,52 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki