Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
Commit 9a05475cebdd ("ipvs: avoid kmem_cache_zalloc in
ip_vs_conn_new") changed ip_vs_conn_new() to allocate an ip_vs_conn
object with kmem_cache_alloc(). The function then…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier ('sid') as the password reset token…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handle_email_otp_return() function returning the secret magic login token in the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
Commit 9a05475cebdd ("ipvs: avoid kmem_cache_zalloc in
ip_vs_conn_new") changed ip_vs_conn_new() to allocate an ip_vs_conn
object with kmem_cache_alloc(). The function then…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier ('sid') as the password reset token…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handle_email_otp_return() function returning the secret magic login token in the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki