Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.
Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
KATALOG INFORMACJI
Podatności
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Filtry katalogu · zakres, producent, rekomendacja
Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.
Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.
Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.
Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.
- CVSS
- 8,1
- EPSS
- 0,35 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes…
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through 4.8.3.
- CVSS
- 8,1
- EPSS
- 0,34 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Homer is open source telecom observability software.
Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without calling the `sqlvalidator.ValidateRawSQL` function used throughout the rest of the codebase. Any authenticated user…
- CVSS
- 8,1
- EPSS
- 0,34 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes The…
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclusion.This issue affects The Voux: from n/a through 6.9.5.
- CVSS
- 8,1
- EPSS
- 0,34 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
- CVSS
- 8,1
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to modify task definitions in projects they…
An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to modify task definitions in projects they are not authorized to access through the /dolphinscheduler/projects/{projectCode}/task-definition/{code}/with-upstream endpoint. The endpoint fails to verify…
- CVSS
- 8,1
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper…
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.
- CVSS
- 8,1
- EPSS
- 0,3 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper…
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
- CVSS
- 8,1
- EPSS
- 0,3 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to…
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed sequential…
- CVSS
- 8,1
- EPSS
- 0,29 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the…
Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,1
- EPSS
- 0,29 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
- CVSS
- 8,1
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
- CVSS
- 8,1
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
- CVSS
- 8,1
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
- CVSS
- 8,1
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
- CVSS
- 8,1
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Unauthenticated Local File Inclusion in Teoro <= 1.1 versions. | Unauthenticated Local File Inclusion in Teoro <= 1.1 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Unauthenticated Local File Inclusion in Fabius <= 1.0 versions. | Unauthenticated Local File Inclusion in Fabius <= 1.0 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions. | Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions. | Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions. | Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions. | Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Unauthenticated Local File Inclusion in TouchUp < 1.4 versions. | Unauthenticated Local File Inclusion in TouchUp < 1.4 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions. | Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Unauthenticated Local File Inclusion in Aalto <= 1.8 versions. | Unauthenticated Local File Inclusion in Aalto <= 1.8 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions. | Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions. | Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions. |
Obserwuj | 8,1 | 0,35 % | ||
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes… | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through 4.8.3. |
Obserwuj | 8,1 | 0,34 % | ||
| Homer is open source telecom observability software. | Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without calling the `sqlvalidator.ValidateRawSQL` function used throughout the rest of the codebase. Any authenticated user… |
Obserwuj | 8,1 | 0,34 % | ||
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes The… | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclusion.This issue affects The Voux: from n/a through 6.9.5. |
Obserwuj | 8,1 | 0,34 % | ||
| Subscriber Broken Access Control in Wordable <= 8.2.10 versions. | Subscriber Broken Access Control in Wordable <= 8.2.10 versions. |
Obserwuj | 8,1 | 0,33 % | ||
| An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to modify task definitions in projects they… | An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to modify task definitions in projects they are not authorized to access through the /dolphinscheduler/projects/{projectCode}/task-definition/{code}/with-upstream endpoint. The endpoint fails to verify… |
Obserwuj | 8,1 | 0,33 % | ||
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper… | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation. |
Obserwuj | 8,1 | 0,3 % | ||
| IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper… | IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command. |
Obserwuj | 8,1 | 0,3 % | ||
| UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to… | UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed sequential… |
Obserwuj | 8,1 | 0,29 % | ||
| Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the… | Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,1 | 0,29 % | ||
| Unauthenticated Local File Inclusion in Ambient <= 1.7 versions. | Unauthenticated Local File Inclusion in Ambient <= 1.7 versions. |
Obserwuj | 8,1 | 0,28 % | ||
| Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions. | Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions. |
Obserwuj | 8,1 | 0,28 % | ||
| Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions. | Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions. |
Obserwuj | 8,1 | 0,28 % | ||
| Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions. | Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions. |
Obserwuj | 8,1 | 0,28 % | ||
| Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions. | Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions. |
Obserwuj | 8,1 | 0,28 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.