Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
- CVSS
- 8,1
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
KATALOG INFORMACJI
Podatności
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Filtry katalogu · zakres, producent, rekomendacja
Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.
Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.
- CVSS
- 8,1
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Backstage is an open framework for building developer portals.
Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentication in the oidc provider. Deployments using OIDC email-based identity resolution with a provider that permits…
- CVSS
- 8,1
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
A flaw was found in Candlepin.
A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiring access to every verified entity. A low-privilege authenticated attacker who can access the first referenced object can…
- CVSS
- 8,1
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are…
An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are not authorized to access through the * /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/stop *…
- CVSS
- 8,1
- EPSS
- 0,28 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to…
Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user consent. Attackers can register a client with the long_lived_access_token scope and lure a user to an authorization…
- CVSS
- 8,1
- EPSS
- 0,27 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Vikunja is an open-source self-hosted task management platform.
Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the `oauth.authorize` permission can call `POST /api/v1/oauth/authorize`, obtain an OAuth authorization code, and exchange the code at `POST /api/v1/oauth/token` for a normal bearer JSON…
- CVSS
- 8,1
- EPSS
- 0,27 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Changing an organization team's permission through the API with only the `permission` field did not rebuild the team's per-unit access,…
Changing an organization team's permission through the API with only the `permission` field did not rebuild the team's per-unit access, and the requested level was not applied as a cap. After an organization owner demoted a team, for example from admin to read, the team's members kept their…
- CVSS
- 8,1
- EPSS
- 0,26 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.
Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.
- CVSS
- 8,1
- EPSS
- 0,26 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing…
LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name.
- CVSS
- 8,1
- EPSS
- 0,26 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9.
The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level…
- CVSS
- 8,1
- EPSS
- 0,25 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the…
Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,1
- EPSS
- 0,24 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer…
Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8,1
- EPSS
- 0,24 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt.
Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from n/a through 4.0.0.
- CVSS
- 8,1
- EPSS
- 0,24 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any…
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT…
- CVSS
- 8,1
- EPSS
- 0,23 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of…
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user to modify department role permissions. Low-privileged attackers can submit roleId and permissionIds values to grant…
- CVSS
- 8,1
- EPSS
- 0,23 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer…
Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)
- CVSS
- 8,1
- EPSS
- 0,23 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The SMS Alert WordPress plugin before 4.0.1 does not verify that the account being logged in is the one the verified one-time code…
The SMS Alert WordPress plugin before 4.0.1 does not verify that the account being logged in is the one the verified one-time code belongs to, allowing unauthenticated attackers to sign in as any user with a stored phone number, including an administrator, by completing a code challenge on a…
- CVSS
- 8,1
- EPSS
- 0,23 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was…
The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was actually verified during its OTP password reset, allowing unauthenticated attackers to set a new password on an arbitrary account, including an administrator, by…
- CVSS
- 8,1
- EPSS
- 0,23 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Vikunja is an open-source self-hosted task management platform.
Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the `user_tokens` table in plaintext. If an attacker gains read access to the database through a backup leak, misconfigured storage, or…
- CVSS
- 8,1
- EPSS
- 0,22 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len -…
ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len - authtag_len without first checking that the received frame is at least ll_hdr_len + authtag_len bytes long. All three variables are uint8_t, so a frame whose…
- CVSS
- 8,1
- EPSS
- 0,21 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS.
VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware…
- CVSS
- 8,1
- EPSS
- 0,21 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was created.
Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was created. Each synchronization passed the stored address directly to `git push`, so a name that later resolved to a blocked or internal address was still reached. A user with…
- CVSS
- 8,1
- EPSS
- 0,19 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to…
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata.
- CVSS
- 8,1
- EPSS
- 0,15 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer…
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
- CVSS
- 8,1
- EPSS
- Nieustalone
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions. | Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions. |
Obserwuj | 8,1 | 0,28 % | ||
| Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions. | Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions. |
Obserwuj | 8,1 | 0,28 % | ||
| Backstage is an open framework for building developer portals. | Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentication in the oidc provider. Deployments using OIDC email-based identity resolution with a provider that permits… |
Obserwuj | 8,1 | 0,28 % | ||
| A flaw was found in Candlepin. | A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiring access to every verified entity. A low-privilege authenticated attacker who can access the first referenced object can… |
Obserwuj | 8,1 | 0,28 % | ||
| An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are… | An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are not authorized to access through the * /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/stop *… |
Obserwuj | 8,1 | 0,28 % | ||
| Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to… | Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user consent. Attackers can register a client with the long_lived_access_token scope and lure a user to an authorization… |
Obserwuj | 8,1 | 0,27 % | ||
| Vikunja is an open-source self-hosted task management platform. | Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the `oauth.authorize` permission can call `POST /api/v1/oauth/authorize`, obtain an OAuth authorization code, and exchange the code at `POST /api/v1/oauth/token` for a normal bearer JSON… |
Obserwuj | 8,1 | 0,27 % | ||
| Changing an organization team's permission through the API with only the `permission` field did not rebuild the team's per-unit access,… | Changing an organization team's permission through the API with only the `permission` field did not rebuild the team's per-unit access, and the requested level was not applied as a cap. After an organization owner demoted a team, for example from admin to read, the team's members kept their… |
Obserwuj | 8,1 | 0,26 % | ||
| Unauthenticated PHP Object Injection in Haaken <= 1.5 versions. | Unauthenticated PHP Object Injection in Haaken <= 1.5 versions. |
Obserwuj | 8,1 | 0,26 % | ||
| LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing… | LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name. |
Obserwuj | 8,1 | 0,26 % | ||
| The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. | The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level… |
Obserwuj | 8,1 | 0,25 % | ||
| Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the… | Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,1 | 0,24 % | ||
| Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer… | Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,1 | 0,24 % | ||
| Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. | Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from n/a through 4.0.0. |
Obserwuj | 8,1 | 0,24 % | ||
| JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any… | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT… |
Obserwuj | 8,1 | 0,23 % | ||
| JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of… | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user to modify department role permissions. Low-privileged attackers can submit roleId and permissionIds values to grant… |
Obserwuj | 8,1 | 0,23 % | ||
| Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer… | Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium) |
Obserwuj | 8,1 | 0,23 % | ||
| The SMS Alert WordPress plugin before 4.0.1 does not verify that the account being logged in is the one the verified one-time code… | The SMS Alert WordPress plugin before 4.0.1 does not verify that the account being logged in is the one the verified one-time code belongs to, allowing unauthenticated attackers to sign in as any user with a stored phone number, including an administrator, by completing a code challenge on a… |
Obserwuj | 8,1 | 0,23 % | ||
| The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was… | The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was actually verified during its OTP password reset, allowing unauthenticated attackers to set a new password on an arbitrary account, including an administrator, by… |
Obserwuj | 8,1 | 0,23 % | ||
| Vikunja is an open-source self-hosted task management platform. | Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the `user_tokens` table in plaintext. If an attacker gains read access to the database through a backup leak, misconfigured storage, or… |
Obserwuj | 8,1 | 0,22 % | ||
| ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len -… | ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len - authtag_len without first checking that the received frame is at least ll_hdr_len + authtag_len bytes long. All three variables are uint8_t, so a frame whose… |
Obserwuj | 8,1 | 0,21 % | ||
| VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. | VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware… |
Obserwuj | 8,1 | 0,21 % | ||
| Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was created. | Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was created. Each synchronization passed the stored address directly to `git push`, so a name that later resolved to a blocked or internal address was still reached. A user with… |
Obserwuj | 8,1 | 0,19 % | ||
| In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to… | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata. |
Obserwuj | 8,1 | 0,15 % | ||
| IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer… | IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow. |
Obserwuj | 8,1 | Nieustalone |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.