Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Topcontent WordPress plugin through 1.2.1 does not properly authorise one of its request handlers and disables HTML sanitisation before storing the submitted content, allowing unauthenticated attackers to publish arbitrary posts containing malicious JavaScript on any site where its API key has…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious JavaScript that executes when an administrator opens the KeyWord Collector…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before outputting it back, allowing unauthenticated users to store arbitrary web scripts that will execute…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full privileges.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, allowing unauthenticated attackers to store a file that executes arbitrary JavaScript in the site's origin when it is…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can be completely bypassed, allowing for Cross-Site Request…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can be completely bypassed, allowing for Cross-Site Request…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
The commit b1af23d836f8 ("KVM: PPC: iommu: Unify TCE checking") unified
IOBA parameter checking across KVM and VFIO into iommu_tce_check_ioba().
While doing so,…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
kvmhv_emulate_tlbie_all_lpid() iterates the nested-guest IDR and drops
mmu_lock before calling kvmhv_emulate_tlbie_lpid(), but does not hold a
reference…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This issue affects Featured Image from URL: from n/a through 6.0.7.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as obj_size_get(otype) + size, and for thread stack elements as STACK_ELEMENT_DATA_SIZE(size) (a round-up plus fixed overhead), without checking either expression for…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,08 % · rekomendacja wg zapisanej polityki
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
Opis źródłowy NVD · ENCVSS 8,8 · rekomendacja wg zapisanej polityki
The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the…
Opis źródłowy NVD · ENCVSS 8,8 · rekomendacja wg zapisanej polityki
CVSS
8,8
EPSS
Nieustalone
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The Topcontent WordPress plugin through 1.2.1 does not properly authorise one of its request handlers and disables HTML sanitisation before storing the submitted content, allowing unauthenticated attackers to publish arbitrary posts containing malicious JavaScript on any site where its API key has…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious JavaScript that executes when an administrator opens the KeyWord Collector…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before outputting it back, allowing unauthenticated users to store arbitrary web scripts that will execute…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full privileges.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, allowing unauthenticated attackers to store a file that executes arbitrary JavaScript in the site's origin when it is…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can be completely bypassed, allowing for Cross-Site Request…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can be completely bypassed, allowing for Cross-Site Request…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
The commit b1af23d836f8 ("KVM: PPC: iommu: Unify TCE checking") unified
IOBA parameter checking across KVM and VFIO into iommu_tce_check_ioba().
While doing so,…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
kvmhv_emulate_tlbie_all_lpid() iterates the nested-guest IDR and drops
mmu_lock before calling kvmhv_emulate_tlbie_lpid(), but does not hold a
reference…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This issue affects Featured Image from URL: from n/a through 6.0.7.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as obj_size_get(otype) + size, and for thread stack elements as STACK_ELEMENT_DATA_SIZE(size) (a round-up plus fixed overhead), without checking either expression for…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,08 % · rekomendacja wg zapisanej polityki
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · rekomendacja wg zapisanej polityki
8,8
Nieustalone
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.